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Foreword

The second edition of my Cyber Intelligence memoir book aims to raise and improve everyone's awareness into what I've been up to and what I'm up to present day in terms of my achievements and projects in the field including to offer an in-depth and never-discussed before perspective on key concepts in terms of what I've been up to throughout the years up to present day. If you're truly looking forward to get a picture in terms of what I've been up to throughout the years up to present day you've come to the right place which is the Second Edition of my Cyber Intelligence memoir which I hope that you'll truly enjoy and that it will eventually "take you back" to a security industry and a Scene that you know and recognize where the ultimate goal would be for you to learn more about me and what I've been up to throughout the years up to present day.

This is going to be a rather more of an elaboration on some of my current previous and past including upcoming projects including a a vast amount of compilation of personally identifiable information on various cybercriminals internationally with the idea to make it more easier to communicate the data which I produced throughout the last couple of years in the form of Bonus Content compilation where I hope that you’ll find the information and the actual technical data relevant and informative.
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Preface

In a world dominated by countless number of fraudulent propositions a single what appears to be a one-man operation in the field since December, 2005 up to present day aims to show them how it's done and what should and could be done better in the context of improving everyone's situational awareness in the field through the systematic and persistent sharing of actionable threat intelligence never-published and discussed before IoCs (Indicators of Compromise) including active and relevant commentary backed with something as refereed to as sarcasm in the context of providing everyone interested in learning about information security and the world of cybercrime research with the necessary perspective from someone who ought to know and pretends to possess the necessary knowledge and later on information on the topic in the true spirit of sharing it and discussing it with his readers.

I sincerely hope that you'll find the Second Edition of my Cyber Intelligence memoir informative and relevant so that you'll be in a perfect position to share it with your friends and colleagues including to post a link on social media and possibly forward it to those who might be interested and want to know more on the topic of information security and cybercrime research.
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The World is small and infinite and we can definitely make it a better place by doing our work following the basic methodology that an “OSINT conducted today is a tax payer’s buck saved somewhere”.

Introduction

It used to be a moment in time when we used to “rock the boat”. With or without the drinks.

Keep reading. We’re about to have a party with the official release of the Second Edition of Dancho Danchev “Cyber Intelligence” memoir.

What’s included inside the Second Edition of my “Cyber Intelligence” Memoir? It’s the inside story behind the life of ex-Bulgarian hacker Dancho Danchev today’s leading expert in the field of cybercrime research and threat intelligence gathering including all the juicy details behind the taking down and monitoring of the Koobface botnet including how I almost got busted once.



This is Dancho Danchev (https://ddanchev.blogspot.com) and I wanted to take the time and effort and welcome you to the second edition of my “Cyber Intelligence” personal memoir where the first edition has already managed to attract approximately 6,732 readers on the Internet Archive where it’s currently available online for free in a variety of E-Book formats where I did my best to detail the true story behind my teenage hacker years up to present day where I’m one of the most internationally recognized cybercrime researchers threat intelligence analysts and security bloggers since December, 2005 when I originally launched my personal blog while I was busy running and managing Astalavista.com while studying in the Netherlands which has already managed to attract approximately 5.6M page views throughout the past decade and is currently one of the security industry’s most popular security publications.



The primary reason behind the release of the Second Edition of “Cyber Intelligence” is to continue to tell my story with all the juicy details up to present day and actually offer an in-depth and never discussed before perspective on my research including to present and communicate the crown jewels of my research to a vast and growing network of readers internationally where the ultimate goal would be to properly present the true story behind my professional career including to offer an in-depth peek inside my teenage hacker years experiences while properly present my story up to present day where I’m an internationally recognized cybercrime researcher security blogger and threat intelligence analyst.



The primary reason behind the release of the Second Edition of “Cyber Intelligence” is to continue to tell my story with all the juicy details up to present day and actually offer an in-depth and never discussed before perspective on my research including to present and communicate the crown jewels of my research to a vast and growing network of readers internationally where the ultimate goal would be to properly present the true story behind my professional career including to offer an in-depth peek inside my teenage hacker years experiences while properly present my story up to present day where I’m an internationally recognized cybercrime researcher security blogger and threat intelligence analyst.



How did I attempt to take down the Koobface botnet? Who’s Hilary Kneber? What was the primary idea behind “Keeping Money Mule Recruits on a Short Leash” blog post series? How did I prevented and actually detected a possible kidnapping attempt? How did I made it to the GCHQ with the Honeynet Project? Is is true that I’ve received an invitation to present at Canadian Intelligence Services? What’s my professional experience with my current employer WhoisXML API?

What does rocking the boat really means? If it’s going to be massive it better be good. At some particular point in time when I was busy working on my personal blog I remember a moment when every day’s story used to dominate my life being in particular the fact that I’ve managed to tell a story for the purpose of sharing it and reaching out to my readership which at the time I was hoping that it was growing with several high profile daily users that I was busy tracking on a daily basis.



It was December, 2005 when I originally launched my personal blog while working for Astalavista.com as a Managing Directory and where I’ve managed to attract on average 7,650

RSS subscribers including to get thousands of unique visitors on a daily basis from across the globe.

The juicy details? At some point in time when I was originally secretly monitoring who was visiting my blog using Statcounter.com where I was hoping to see someone famous I’ve noticed that I got a regular visitor from The Pentagon who was basically visiting the blog on a daily basis during not necessarily a specific time but in general which was great news and this greatly motivated me to continue posting high-quality research and news and commentary articles on various events that took place in the security industry including across the globe.

I also got several visitors from the CIA, the NSA including the FBI the NYTimes and BBC

which was an outstanding audience at the time which was quite interesting to monitor and interact with at that time through my daily blog posts on a variety of interesting and high-quality topics.

This is the perfect timing to say big thanks to everyone who approached me to say “thanks” “hi”

and “keep up the good work” in terms of the first edition of my “Cyber Intelligence” personal memoir and everyone who referenced or quoted or actually shared the first edition of my E-Book on social media.

In the Second Edition of my “Cyber Intelligence” E-book I’ll continue to share my personal story in the security industry including my experiences in the world of fighting cybercrime and threat intelligence gathering and I’ll do my best to offer an in-depth and personal account based on some of the research that I publish online in particular my personal blog (https://ddanchev.blogspot.com).



When I originally launched my personal blog (https://ddanchev.blogspot.com) my primary idea was to comment and share as much information security and computer security advice as possible as well as to discuss the latest Web 2.0 in a technological context including to actually offer a never-published or discussed before peek inside the modern cybercrime ecosystem where I’ve successfully managed to position my personal blog as a leading and a must-visit publication for anything related to malicious software OSINT botnet research including cybercrime research and threat intelligence type of research and information.



It used to be a moment in time when I was busy practically commanding a vast network of loyal readers through the direct and persistent distribution of my high-quality research to a network of my blog readers where the ultimate idea was to spread a message and to actually communicate my research and blog posts to as many people as possible.





Back in the day I had approximately 11,000 Twitter followers and approximately 7,000 RSS

blog readers which is quite impressive for a one-man operation since December, 2005 when I originally launched my personal blog (https://ddanchev.blogspot.com). A couple of years later I realized that I’ve participated in a Top Secret GCHQ Program called “Lovely Horse” which aims to utilize publicly accessible sources of information for cyber defense purposes also known as OSINT for cyber defense which was quite a success at the time and it was a privilege and an honor to participate in the program.

It took me a couple of hours to successfully track down and monitor the Koobface botnet which led me to publish an OSINT analysis which basically offered an in-depth personally identifiable information on one of its botnet masters which was quite a success at the time and led me to a DW interview including a reference in a NYTimes article on the topic. Back in the day I was the primary source of information on the Koobface botnet where my primary responsibilities included the daily monitoring of the newly launched campaigns where the ultimate goal was to offer an in-depth technical and enriched information on the currently circulating campaigns where the ultimate goal was to attempt to profile and also attempt to take them offline.



Throughout my Koobface investigations and research I once got a personal message from the Koobface gang which was embedded within the actual C&C infrastructure and was basically greeting me including several C&C server domains which typosquatted my name.

Back in 2016 I have a Keynote on Koobface at an extremely popular security event in Spain called CyberCamp 2016 where I actually presented and discussed never-published or discussed before details regarding my monitoring of the Koobface botnet in the context of attempting to take it offline and got a pretty positive response from most of the folks attending the event.



Following a successful career as a hacker enthusiast during the 90’s and a successful management and operation of one of the World’s leading portals for hackers and security experts which is https://astalavista.com for a period of three years circa 2003-2006 when I originally decided to launch one of the security industry’s leading publication which is my personal blog -

https://ddanchev.blogspot.com I managed to somehow land a successful career as an independent contractor in the world of security blogging cybercrime research and threat intelligence which led me to visit several invite-only conferences including to present at event at an undisclosed location including to actually attract and retain approximately 6M page views which is not necessarily bad for a man one operation in terms of running and maintaining my personal blog for a period of 12 years.





Among the primary reasons for coming up with this 2268 pages long personal memoir is to empower fellow researchers and security experts including the general public with an in-depth personal account overview of my experience in the security industry’s as a teenage hacker enthusiast back in the 90’s today’s most popular and often cited security blogger threat intelligence analyst and cybercrime researcher internationally and to present a diverse set of high-quality and never-published and discussed before case studies and enriched technical information and OSINT data on current and emerging cyber attack trends.

The primary goal of the book would be to position my memoir as one of the most popular and often cited personal account of the hacking and the security Scene circa the 90’s through the prism of my teenage hacker experience up to present day in terms of various high-profile and advanced nation-state actors and malicious and fraudulent cyber attack campaigns where the ultimate goal would be to discuss in-depth my experience in the field of security blogging threat intelligence gathering and cybercrime research throughout the past decade.



It used to be a moment in time when “sharing was caring” and with the booming Web 2.0

enterprises and the actual concept numerous new online participants and Web 2.0 darlings started popping up as mushrooms another set of individuals prone to make a change an impact quickly emerged online potentially sharing a treasure trove of personal knowledge into the world of modern technologies including the very basics of information security hacking and cyber warfare including a newly releases and never-published before research into the area of cybercrime research and the actual process of profiling the bad guys online in terms of their actual campaigns and actual malicious infrastructure behind their online campaigns.



It used to be a personal privilege back in December, 2005 when I originally launched my personal Dancho Danchev’s Blog - Mind Streams of Information Security Knowledge blog which quickly attracted a high-quality and relevant audience which is currently one of the security industry’s most popular and relevant security hacking OSINT and threat intelligence including cybercrime research type of gathering online publications where I’ve continued to publish and post high-quality and never-publshed before and released research and analysis articles.





At some point in time I got practically used to getting referenced and quoted by mainstream news media in terms of my research which greatly motivated an inspired me to continue doing my research an to actually attempt to inspire other researchers and readers to continue reading and visiting my blog on a daily basis where I owe everyone a big deal of thanks for the daily visits and for actually bothering to read my articles and actually go through my research at the time up to present day.

Tracking down and monitoring the Koobface botnet on a daily basis where I successfully became the primary source of information on the Koobface botnet at the time was quite a success and a pretty interesting experience where I ultimately managed to take it offline including to held a Keynote presentation on the topic of monitoring and tracking down of the Koobface botnet.



Following a series of messages left on the actual C&C (Command and Control) server locations which were basically greeting me and referencing my research at the time including a series of typosquatted domains using my name at some point in time I managed to actually come up with a proper “Top 10 Things You Didn’t Know About the Koobface Gang” article for ZDNet at the time where the botnet masters actually left a message within the C&C (Command and Control) server location basically answering the key points on a point by point basis which was quite a success at the time of monitoring and tracking down the Koobface botnet.





The primary purpose behind the actual release of my personal memoir is to reach out to to a new set of audience and actually elaborate more on my experience and expertise in the field including to offer a God’s Eye perspective on the current and emerging cybercrime ecosystem in combination with active case studies and technical material whose purpose is to greatly assist everyone that’s reading this memoir with the idea to provoke you to share it with your friends and colleagues including to actually recommend it to your friends and colleagues.





I sincerely hope that you’ll find the Second Edition of my Cyber Intelligence memoir informative and educational and that you’ll share it on your social media account including to share it with colleagues.

Yours sincerely,

Dancho Danchev

https://ddanchev.blogspot.com

Email: dancho.danchev@hush.com

Testimonials

“I have been working in the security space for many years and for a very large part of that have been following the excellent research work that Dancho has been doing in identifying cyber criminals and doing complex analysis of highly advanced modern day malware attacks. Dancho is extremely well known in the security industry for the work he has done and continues to do.

When we had the opportunity of collaborating with Dancho at Webroot, we didn’t hesitate.

Dancho has proven to deliver on a continuous basis for us and his work is simply phenomenal. I look forward to working with Dancho for many years to come. ”

— Jacques Erasmus

“Dancho is a veritable mine of information, particularly on subjects like the ones he blogs about, such as spam and malware campaigns and the actors behind them. I am an avid reader of his, and also have met Dancho at a few conferences that we’ve both attended. I’ve found him to be extremely friendly, and always ready to explain anything he’s been working on. Were I organising a conference, I would definitely send him an invite. ”





— Jamie Riden

“Dancho is an expert researcher who I’ve had the pleasure of working with on several hacker investigations for Taia Global clients. I consider Dancho one of the best and most insightful researchers working in InfoSec today. ”

— Jeffrey Carr

“Dancho Danchev has his pulse on the cyber criminal community. I can think of few people who have his experience, skills and understanding when it comes to cyber intelligence and understanding the cyber threat. I cannot recommend Dancho enough.”

— Lance Spitzner

“Dancho is one of those exceedingly rare security professionals with not only an eye for uncovering the root cause of an attack and the ability to examine it from multiple angles, but also explain his findings in a way that has a meaningful and direct impact on those tasked with





defending against such attacks. I admire the depth of his analysis and his dogged determination to track back who the criminal operators are despite the dangers he could be exposed to.

Dancho gets two-thumbs-up from me and I’d hire him in a heart-beat if heever makes it to the USA. In the meantime I’ll keep on following his research, reading his blogs and looking forward to collaborating with him on future cyber crime investigations. ”

— Gunter Ollmann

“Dancho is an exceptional information security professional; he continually goes the extra mile for clients and the security community. His knowledge and analysis in core areas as threat intelligence analysis, cybercrime counter Intelligence and competitive intelligence research is outstanding. He also manages the most difficult task with ease, that of communicating this in an understandable and meaningful form for the community. Working with Dancho over several years has been highly productive, and beneficial. ”

— Jart Armin





“I first knew Dancho when he was fresh out of college but already with a prodigious understanding of information security matters. He became one of the experts in the Security Clinic on ITsecurity.com, a site I founded and was publishing at the time; and he willingly gave free security help and advice to visitors to the site. Since those days I have watched both his career and knowledge grow in leaps and bounds until he is now, without any doubt, one of the world’s leading experts on the shady world of cybercrime. ”

— Kevin Townsend

“While rebuilding the site security and fraud team at a leading online web site, threats and rapid evolution in the online security space necessitated I get up to speed quickly, and with more than a modicum of depth and breadth of understanding of current trends and risks in the cyber security realm. After spending considerable time building an information network of the most germane, relevant, and useful sources, a common thread emerged from the chatter of activity and updates – “Dancho Danchev”. As I poured over security publications, cyber-security journals, blogs, and security vendor sites, I continued to see Dancho cited and acknowledged as the security researcher and expert who “broke the story” or “tipped off users to the vulnerabilities” or “alerted the community to threat vectors” for major events. Dancho has voluntarily shared critical information on what the crooks are up to and has been an invaluable and much appreciated resource. Dancho’s passion for his work is reflected in his genuine desire to quash the “bad guys” activities and share as much actionable information as he possibly can.

I highly recommend Dancho to any organization seeking an top-notch expert and passionate evangelist of online security practices. ”

— Chris Duncan

Recommendations



“I have met Dancho on numerous occasions in a professional capacity and communicated with him by email countless times over the years on a number of operational investigative and research matters. He is a major stalwart of the Information Security Community and has been mainly known publicly for his exceptional Blogs since about 2006:



http://ddanchev.blogspot.com



http://zdnet.com/blog/security



http://blog.webroot.com

What is less publicly well known is his constant and unrelenting contribution to actual investigations, as demonstrated by his posts to a number of highly vetted Information Security mailing lists. It has been my pleasure to invite Dancho at every conference I have held at INTERPOL headquarters, these events are themselves highly vetted and invitation only, and this is a testament to his contribution to Internet crime investigations. His contributions have been fundamentally insightful and unique: he knows the Malware ecosystem better than most of my associates and can always be relied upon to assist without reward. He does this simply because it is the right thing to do, despite the obvious risk to his personal safety by contributing to investigations that will disrupt the objectives, in particular, of well resourced Eastern European criminals.

His particular skills are in discovering new threats in Information Security: use of new software exploits as well as new hardware tools used to circumvent protective services for banks and other sensitive computer systems. Geographically, he has some very strong track records of providing insight into criminals and “Nation State Actors” in Russia and China in particular, in addition to the use of the Internet by Islamic extremists (for example the ‘Operation Ababil’

attacks of Wells Fargo, US Bank and PNC Bank). Media outlets that have benefitted from his investigations into attacks on their online properties include CNN, The New York Times, YouTube, Digg, Bing and Google.

One of the most public and significant contributions he has made relates to the identification of the Koobface gang: a highly successful group of Eastern European hackers. These attacks have almost all been against US targets: both on an industrial scale as well as fundamentally against US citizens.



It is my professional opinion that most of these cases would have been substantially harder to combat and gain attribution against, without the timely and highly technical assistance of Dancho Danchev. The bravery he has show in unusual and the risks to his personal safety that he has had to endure have been real and significant. The American people owe him a debt of gratitude and would be far more protected in their online activities if he were able to continue his work from US territory with the inherent benefits that would afford him. ”.

Steve Santorelli

“I Sean M. Bodmer have followed Dancho Danchev’s work since 2008 through online security threat intelligence centered on the sharing of actionable intelligence focused on bringing a halt to or protecting others from cyber criminals and the spectrum of threats they pose to the world and global economies at large.

Prior to 2010 I worked as a U.S. Defense Contractor, Government Liaison, and deployed along the US military in combat operations and situations for more than two years. After leaving the US Defense Intelligence Cyber Operations space I moved to private sector where I grew to engage more foreign nationals in the academic and research space that applied to threat intelligence, malware intelligence, and counterintelligence collections against cyber criminals both domestic and abroad. I currently hold a US DoD security clearance and am regularly invited to speak before US Congress, US STRATCOM, and several other Cyber Operations focused agencies and organizations. Dancho Danchev’s exploits of vast troves of intelligence on cyber threats has been positively applauded and cheered for several years. I truly feel with my experience and background not only does Dancho Danchev possess a massive wealth of knowledge in the space of European Cyber threats ranging from small to nation state funded through his vast network of intelligence source born out of his life experience and grown relationships. Dancho Danchev is one man if when “the stuff hit the proverbial fan” I would turn to Dancho and ask him for some of his wisdom and advice based on his experience.



Dancho Danchev is a man I call a mentor, a respected colleague, a good man, and a friend. He would be one able to be of like mind heart of many American’s who have the same passion to protect and defend those who would do harm to others who are not able to properly defend themselves from cyber criminals and threats. I feel it would be a benefit to US National Cyber Security interests to allow Dancho Danchev expedited entry into the United States to live in safety from foreign entities who would do harm to professionals who believe in the greater good of humanity and are not afraid to protect others who cannot protect themselves from these anonymous threats who pose our global systems great risk on a daily basis. ”.

Sean Bodmer

“My name is Mikko Hypponen. I’ve been working at F-Secure Corporation since 1991.

Currently I’m the Chief Research Officer. I have known Dancho Danchev since 2001. During these years he has constantly demonstrated remarkable technical skills and hard work ethics.

He’s a world-leading expert in computer security. He’s especially strong with his research into the criminal computer underground and in to the actors behind some of the most problematic computer attacks over the last decade. These areas have a clear lack of leading researchers, making Dancho’s skills even more valuable. I find Dancho is a very honest and reliable person. I would personally recommend Dancho to receive a working permit for United States. He would be a major asset for any company. “

Mikko Hypponen



“I have never met Mr. Danchev personally. However, he’s well known in the information security community, and through his contributions to this community I learned to respect and value his work and personality. Dancho Danchev’s work is unique in the landscape of information security research in that he provides a continuous stream of insights regarding cybercriminals and online fraud life cycle. Very few people in the industry have both the technical skills and depth required to analyze cybercrime attacks, and the ability to see the big picture and to tie all the loose ends into a single coherent dissertation. Mr. Danchev is particularly skillful at following even subtle hints and traces of fraudsters and cyber criminals, connecting and cross referencing the technology sides of their operations geographically and chronologically to track the perpetrators, and using social media and open source data to construct a full picture of the masterminds behind cybercrime. This puts pressure on law enforcement entities in their respective countries to take action on the now exposed individuals.

In this respect, Mr. Danchev is probably the most influential single researcher in actually reducing the global volume of cybercrime. Since the vast majority of cybercrime has US citizens, corporates and financial institutions as victims, thus Mr. Danchev’s work and research has a considerable impact at the (US) national level. Few prominent examples of such contributions to the cybersecurity research community and cybercrime fighting efforts are: Exposing the operator of the Koobface botnet (at that time one of the world’s largest botnets) in 2012.

A 25-part(!) series of blogs on fake software operators and origins during 2007-2011. Fake software is a scam wherein a victim pays money for software which doesn’t really work as advertised. Usually the individual losses are modest (e.g. $50), but the national impact can be considerable due to the fact that it’s pretty wide spread phenomenon.

An 18-part(!) series of blogs on money mule recruitment operators and origins during 2008-2013. Money mules are a critical link in cybercrime fraud life cycle – they are used to separate the fraudster from the victim by placing a middleman (the money mule) in between, so the victim ends up sending money to the mule who transfers it (minus a small commission) to the fraudster.

Shutting down mule recruitment means reducing online financial fraud levels.





Tracking the 2008 CNN denial-of-service attack to its source in China. Needless to say, these are but few examples for his extraordinary work which he publishes continuously and frequently.

Additionally, Mr. Danchev is an active participant in several private researcher communities, and his help and contributions to other researchers are extremely valuable. ”

Amit Klein

Foreword





It used to be a moment in time when “sharing was caring” and with the booming Web 2.0

enterprises and the actual concept numerous new online participants and Web 2.0 darlings started popping up as mushrooms another set of individuals prone to make a change an impact quickly emerged online potentially sharing a treasure trove of personal knowledge into the world of modern technologies including the very basics of information security hacking and cyber warfare including a newly releases and never-published before research into the area of cybercrime research and the actual process of profiling the bad guys onlines in terms of their actual campaigns and actual malicious infrastructure behind their online campaigns.

It used to be a personal privilege back in December, 2005 when I originally launched my personal Dancho Danchev’s Blog - Mind Streams of Information Security Knowledge blog which quickly attracted a high-quality and relevant audience which is currently one of the security industry’s most popular and relevant security hacking OSINT and threat intelligence including cybercrime research type of gathering online publications where I’ve continued to publish and post high-quality and never-published before and released research and analysis articles.





At some point in time I got practically used to getting referenced and quoted by mainstream news media in terms of my research which greatly motivated an inspired me to continue doing my research an to actually attempt to inspire other researchers and readers to continue reading and visiting my blog on a daily basis where I owe everyone a big deal of thanks for the daily visits and for actually bothering to read my articles and actually go through my research at the time up to present day.

It was a rare moment in time when I practically decided to share as much information security knowledge as possible with as many readers possible internationally which led me to pursue a high value career as a security blogger OSINT analyst including threat intelligence analyst where I did my best to make invaluable contributions to a variety of online news Web sites including various international companies since the 90’s up to present day where my most recent position is to act as a DNS Threat Researcher at WhoisXML API.

Biography





Dancho Danchev is the world’s leading expert in the field of cybercrime fighting and threat intelligence gathering having actively pioneered his own methodlogy for processing threat intelligence leading to a successful set of hundreas of high-quality anaysis and research articles published at the industry’s leading threat intelligence blog - ZDNet’s Zero Day, Dancho Danchev’s Mind Streams of Information Security Knowledge and Webroot’s Threat Blog with his research featured in Techmeme, ZDNet, CNN, PCWorld, SCMagazine, TheRegister, NYTimes, CNET, ComputerWorld, H+Magazine currently producing threat intelligence at the industry’s leading threat intelligence blog - Dancho Danchev’s - Mind Streams of Information Security Knowledge.

Among the key achievements throughout my career include the following key summary points:



Presented at the GCHQ with the Honeynet Project



SCMagazine Who to Follow on Twitter for 2011



Participated in a Top Secret GCHQ Program called “Lovely Horse”



Identified a major victim of the SolarWinds Attack - PaloAltoNetworks



Found malware on the Web Site of Flashpoint



Tracked monitored and profiled the Koobface Botnet and exposed one botnet operator



Made it to Slashdot two times



My Personal Blog got 5.6M Page Views Since December, 2005



My old Twitter Account got 11,000 followers



I had an average of 7,000 RSS readers on my blog



I have my own vinyl “Blue Sabbath Black Cheer / Griefer – We Hate You / Dancho Danchev Suck My Dick” madeby a Canadian artist



Currently running Astalavista.box.sk



I gave an interview to DW on the Koobface Botnet



I gave an interview to NYTimes on the Koobface botnet



I gave an interview to Russian OSINT



Listed as a major competitor by Jeffrey Carr’s Taia Global





Presented at the GCHQ



Presented at Interpol



Presented at InfoSec



Presented at CyberCamp



Presented at RSA Europe

With his research featured at RSA Europe, CyberCamp, InfoSec, GCHQ and Interpol the researcher continues to actively produce threat intelligence at the industry’s leading threat intelligence blog - Dancho Danchev’s - Mind Streams of Information Security Knowledge publishing a diverse set of hundreds of high-quality research analysis detailing the malicious and fraudulent activities at nation-state and malicious actors across the globe.



Research and News Articles covering my research and referencing me throughout - 2008:



Russian hacker ‘militia’ mobilizes to attack Georgia



Fraudsters Target Facebook With Phishing Scam



Fake Microsoft e-mail contains Trojan virus



Hackers expand massive IFRAME attack to prime sites



Hackers infiltrate Google searches



Hackers expand massive IFrame attack to prime sites



Hackers knocked Comcast.net offline



Adobe investigates Flash Player attacks



High-tech bank robbers phone it in



Attackers booby-trap searches at top Web sites



Carpet bombing networks in cyberspace



Storm worm e-mail says U.S. attacked Iran



India’s underground CAPTCHA-breaking economy



Domain Name Record Altered to Hack Comcast.net



Google searchers could end up with a new type of bug



Ongoing IFrame attack proving difficult to kill



Hackers expand massive IFRAME attack to prime sites



Danchev: The small pack Web malware exploitation kit



Danchev: Massive SQL injection the Chinese way



CAPTCHAs are dead - new research from Dancho Danchev confirms it



Hackers infiltrate Google searches



Massive faux-CNN spam blitz uses legit sites to deliver fake Flash



Faked CNN spam blitz pushes fake Flash



Danchev: Anti-fraud site DDOS attack



Sony PlayStation site victim of SQL-injection attack



Fake CNN Alert Still Spreading Malware



Look Ma, I’m on CIA.gov

Research and News Articles covering my research and referencing me throughout - 2009:



Green Dam exploit in the wild



“In gaz we trust”: a fake Russian energy company facilitating cybercrime



Don’t pay your ransom via SMS



NYT scareware scam linked to click fraud botnet



Danchev: A crimeware developer’s to-do list



Danchev rained on my scareware campaign



Is “aggregate-and-forget” the future of cyber-extortion?



NYT scareware scam linked to click fraud botnet



Microsoft declares war on ‘scareware’



Don’t pay your ransom via SMS



Twitter warms up malware filter



What’s really the safest Web Browser?



With Unrest in Iran, Cyber-attacks Begin



Zeus bot found using Amazon’s EC2 as C&C server

Research and News Articles covering my research and referencing me throughout - 2010:



Firefox add-on encrypts sessions with Facebook, Twitter



Watch out for malware with those pretty Mac screensavers



Months-old Skype vulnerability exploited in the wild



Danchev: Money mule recruiters



Cybercrime’s bulletproof hosting exposed



Malware Threatens to Sue BitTorrent Downloaders



Firefox add-on encrypts sessions with Facebook, Twitter



Chuck Norris Botnet Karate-chops Routers Hard

Research and News Articles covering my research and referencing me throughout - 2011:



Kaspersky disputes McAfee’s Shady Rat report



Has EV-SSL Growth Been Slow?



Report: Vishing Attack Targets Skype Users





Research and News Articles covering my research and referencing me throughout - 2012:



Fake UPS notices deliver malware



ZeuS/Zbot Trojan Spread Through Rogue US Airways Email



New Skype malware threat reported: Poison Ivy



Five Koobface botnet suspects named by New York Times



Virtual jihad: How real is the threat?



Is the death knell sounding for traditional antivirus?



Can the Nuclear exploit kit dethrone Blackhole?



Experts split over regulation for bounty-hunting bug sniffers



Spammers Using Fake YouTube Notifications to Peddle Drugs



Adele Bests Adderall As Affiliate Spammers Offer Music Downloads



Bulgarian sleuth unveils botnet operators



Fake PayPal Emails Distributing Malware



Web Gang Operating in the Open



ZeuS/Zbot Trojan Spread Through Rogue US Airways Email



Buy 500 hacked Twitter accounts for less than a pint



NBC.com Hacked, Infected With Citadel Trojan

Research and News Articles covering my research and referencing me throughout - 2013:



How Much Does A Botnet Cost?



Automated YouTube account generator offered to cyber crooks



Upgraded Modular Malware Platform Released in Black Market



Deconstructing the Al-Qassam Cyber Fighters Assault on US Banks



NBC hack infects visitors in ‘drive by’ cyberattack



Bitcoins are being traded for hack tools



New DIY Google Dorks Based Hacking Tool Released



Hacking The TDoS Attack



Mass website hacking tool alerts to dangers of Google dorks



Cybercrime service automates creation of fake scanned IDs



Spammers unleash DIY phone number slurping web tool



Spam email contains malware, not Apple gift card



APT1, that scary cyber-Cold War gang: Not even China’s best



Mass website hacking tool alerts to dangers of Google dorks



C&C PHP script for staging DDoS attacks sold on underground forums



Russian Malware-as-a-Service Offers Up Server Rentals for $240 a Pop



Java exploit kit sells for $40 per day



Buggy DIY botnet tool leaks in black market



New DIY Google Dorks Based Hacking Tool Released



Botnets for rent, criminal services sold in the underground market



Spam email contains malware, not Apple gift card

When I originally launched my career as an independent contractor and Technical Collector in 1999 I originally joined forces with the infamous DiamondCS’s Trojan Defense Suite as a Newsletter Manager and Technical Collector.

The 90’s Hacking Scene

It used to be quite a privilege when I originally attempted to publish an article which I proposed to one of my homeland’s primary technology magazine HiComm and when I got actually invited to publish a series of articles on a monthly basis. Among the first things which I did back then was to translate my extremely popular document “The Complete Windows Trojans Paper” to Bulgarian which was quite a success and the article got published and accepted which was originally published in the Christmas edition of the magazine.

The original story behind my infamous “The Complete Windows Trojans Paper” was a major shift between my understanding and experience within the hacking Scene and the modern security industry where I really wanted and did my best to have a career which leads me to today’s leading expert in the field of cybercrime research and threat intelligence including security blogging and OSINT research and analysis on the bad guys including various international and well known cyber threat actors.

I originally wrote and released my “The Complete Windows Trojans Paper” on my own as part of a major marketing effort to promote my knowledge and expertise in the scene where the ultimate goal was to produce a high-quality and never released publication on the topic and basically make it easier for everyone to understand the ongoing trend that have to do with trojan horses back then where I later on originally published my publication on what used to be among my first independent contractor position at my first employer at the time which was Netherlands-based Frame4 Security Systems where I also did a marketing editorial on the company’s web site and has been supporting and working with the company ever since.

The interesting part back then was that I also got a personal recommendation from the company owner for my university application which at the time was a Netherlands-based university where I had the ambition to relocate with my girlfriend and partner in life at the time which we eventually did with the idea to visit and actually go to study in that country.

It used to be a moment in time when hacking and computer security was a hot topic which prompted me to enter the world of information security professionally back in the 90’s following two professional work experiences with two anti-trojan and anti-malware vendors where the first was DiamondCS’s Trojan Defense Suite and the second the U.S based LockDownCorp where I was busy collecting trojan horses and assisting in the process of building help files describing their features including to assist in the process of developing signatures and eventually protecting their customers from current trojan threats in the form of newly released remote access malicious software.

Among the key personal bookmarks that I had at the time were https://box.sk including the infamous https://astalavista.box.sk where I’m currently running a high-profile search engine for hackers.

This is Dancho (https://ddanchev.blogspot.com) and I’ve decided to share my personal real-life story circa the 90’s when I was a prominent ex-Bulgarian hacker during the infamous hacker spree during the 90’s when Astalavista.box.sk and Progenic.com were my primary and daily visit type of bookmarks which greatly provoked me to pursue a basically 20 year long career as an information security specialist today’s world’s leading expert in the field of cybercrime research

and threat intelligence gathering that’s been maintaining one of the security industry’s leading and most popular security publications since December, 2005 which is my personal blog which I originally launched while working as a Managing Director for https://astalavista.com which at the time was one of the world’s most popular and high-traffic visited information security portals in the world where I had the privilege to work as a Managing Director while studying in the Netherlands.

Do you want to know about my real-life story as an ex-Bulgarian hacker during the 90’s? Are you interested in learning more about how we set up the foundation of the Technical Collection market segment including today’s modern threat intelligence market segment and how we set them straight using data information and knowledge which was produced and disseminated?

Keep reading.

The story takes place in a small town in Bulgaria during the 90’s in a post Soviet and post Communist country where modern technologies slowly start to take place prompting a local whiz kid to gather as much information from a network of connected computers known as the Internet for the purpose of seeking a global domination through active and persistent information sharing exchange with colleagues from across the globe including exclusively the United States and members of the U.S Security Industry the Scene and prominent members of the U.S Intelligence Community including hundreds of independent contractors in a post and pre 9/11 World which is where Dancho Danchev originally began his career as a hacker enthusiast today’s leading expert in the field of cybercrime research and threat intelligence gathering.

While I was in Bulgaria during my teenage hacker years I was busy freelancing as an information security consultant while working with international security portals where I was busy offering advice and practical information security advice and practical solution recommendations including my work with CIO.bg where I once contributed with an article on Cyberterrorism and Cyber Jihad including a series of publications for HiComm.bg where I was running a popular information security rubric and participated with several articles in several of the magazine’s issues.

At a later stage I somehow decided to go corporate an in a way find a way to enter the commercial information security industry with my knowledge potentially beginning to contribute with knowledge and information using my personal contacts at various information security portals on my way to land a possible job preferably as a writer security blogger or a journalist which I apparently succeeded in doing as I’ve been actively contributing with my own research and knowledge on a variety of h/c/p/a (Hacking/Cracking/Phreaking/Anarchy) portals at the time.

At some point in time Dancho decide to approach the primary operator of one of his favorite security Web sites at the time — https://net-security.org for the purpose of contributing with an article for their newly launched forbidden.net-security.org project. His idea was to contribute with a security article for their recently launched Newsletter and the article in question was a good old-fashined “How to use trojan horses” manual. The article eventually got accepted and Dancho felt proud of himself for making a contribution to the project and having his article published so that eventually more people will read it and send him an email with questions about trojan horses and the actual article. The primary Webmaster of net-security.org at the time was

Berislav Kucan and the project still remains one of Dancho’s favorite and most popular visited security Web site on a daily basis.

At a later stage I decided to establish a working relationship with Frame4 Security Systems which is a Dutch-based company for the purpose of writing an improved version of the original

“How to use trojan horses” paper which later on became the “The Complete Windows Trojans Paper” which quickly became one of the Scene’s most popular and highly read paper on modern trojan horses and how to use them and how to protect against them.

With the summer coming to an end Dancho got an offer to begin to work at the local office of his ISP (Internet Service Provider) which at the time was Digital Systems for the position of office assistant where he was responsible for introducing new clients to the ISP’s service offering and for processing invoices. Among the key benefits for working at the local ISP office was the actual bandwidth that he got access to allowing him to access the Internet without any sort of limitations which he used to visit some of his favorite Top50 and Top100 security and hacking Web sites where he eventually downloaded some of the most recently released hacking and security tools including trojan horses which he copied on a floppy disk and eventually brought back home during the lunch break for the purpose of exchanging the information with his second employer at the time which was an anti-trojans vendor using a publicly accessible FTP server for the purpose of helping his employer improve the detection rate for these type of programs and trojan horses. Dancho would then receive a payment for having collected and actually shared these programs and trojan horses which he would use to pay the bills at the time and actually pay for using his ISP’s service.

At some point in time he eventually got approached by a guy known as HeLLfiReZ who was interested in working with him and actually sharing his collection of trojan horses which he would then also share with his employer which at the time was LockDownCorp and earn revenue in the process. It would later come to his attentio that the guy that approached him was actually one of the key members of the infamous Sub7 trojan horse group which at a particual point in time was responsible for launching a DDoS (Distributed Denial of Service) attack against the researcher Steve Gibson who extensively profiled the campaign and actually had a conversation with HeLLfiReZ and his team members for the purpose of finding out how launched the attack and how it took place.

He would eventually run a personal hacking and secutity Web site archive using hosting courtesy of his employer LockDownCorp and run a popular Hacking and Security Web site which he would then feature on Progenic.com’s Top100 Hacking and Security Web sites including to actually offer paid security consultations in terms of finding out ways to help people protect their home PCs from trojan horses and teaching them how to use a firewall and how they can secure their home PCs.

At a later stage in his early Information Security career he would visit and join

https://itsecurity.com’s Security Clinic where he would have his personal biography featured and actually respond to common security questions which users of the Web site will submit and have his response featured on the front page potentially driving traffic to his employer at the time

which was Frame4 Security Systems and actually improving his knowledge and understanding of Information Security in general.

Dancho was also known for having participated in the Blackcode Ravers hacking group which was running the popular https://blackcode.com Web site at the time and actually participated with two issues of a popular Security Newsletter at the time which were featured on the home page of the portal.

During the glorious years of IRC (Internet Relay Chat) where Dancho was busy hanging on several IRC networks including DALNet and his local country’s IRC network he managed to obtain the /etc/shadow password file for his entire ISP (Internet Service Provider) which at the tim was Digital Systems and shared a copy of it with his best friend at the time George Kadiyski for the purpose of using several popular and high-profile Wordlists including John the Ripper password cracker potentially obtaining access and brute-forcing the entire password list for hundreds of active dial-up Internet based accounts at the time. Over a period of several days the results at the time were outstanding in the context of actually succeeding in the brute-forcing process potentially allowing Dancho and his friend to easily access free Internet based dial-up accounts which at the time cost money allowing them to use the Internet for free.

At a later stage Dancho also managed to obtain access to his local town’s competing ISP

(Internet Service Provider) which was known as BIANet /etc/shadow which was send to him by a friend and he also once again shared it with his friend who would once again begin bruteforcing the password file using a variety of Worldlists and the infamous John the Ripper passwor cracking tool at the time potentially allowing Dancho and his friend easy access to unlimited Internet based dial-up connectivity.

The time has come to play a game. Dancho quickly powered his 16-bit Pravetz PC 2MB RAM

and a screen full of computer game choices quickly appeared prompting him to choose a game.

While loading a relatively known game known as Scorch Dancho decided to play two hours and then proceed with meeting his friends and start a discussion with his grandma. A huge fan of strategy games Dancho decided that he didn’t have the time to dedicate to play his favorite game

— Sid Meier’s Civilization and instead he figured that he would eventually play the game later throughout the day. Playing Scorch was quite an experience and he took a few hours of his precious learning time to interact with the game. He then decided to approach his best friend at the time and co-conspirator in the World of UFO’s the Soviet Union and computer games including the hacking Scene for two hours of extensive game play where we would strategize on how to best “approach” the Soviet Union in terms of invasion actively and carefully planning every move on our way to invade the Soviet Union and eventually all the surrounding countries.

While I was busy preparing for our several hour game play George was supposed to be busy going through a CD which was basically a mirror of Packetstormsecurity in particular the E-Zine section so that we can prepare to have a conversation in terms of working out our technological and military strategy on our way to achieve global domination in the original Sid Meier’s Civilization. What we basically did in the beginning was to strategize and actually get a better view of the technology tree of the game and while I was busy moving the Empire along George was busy keeping notes on our way to keep track and advance out military strategy on a “first come first serve” basis.

Provoked by the need to reach out to a vast network of computers known as the Internet —

Dancho quickly decided that the time has come to get connected — so that he decided to seek a proper connection provider in his local home-town. Back in the day the primary connection providers in the time were Bulgaria’s Digital Systems BIA Net and the country’s leading mobile connectivity provider — Mtel’s pre-paid dial-up cards. Times were different in terms of connectivity and DSL and ADSL were a dream come true in the face of corporate networks properly utilizing and using ISDN type of based connectivity. Keeping it simple — Dancho decided to quickly acquire the necessary dial-up modem — which he would eventually fall in love with potentially reaching out to a vast network of computers known as the Internet using the help of a local dial-up provider known as Digital Systems. Back in the day — hourly based dialup access meant think twice about what you do and how you do it online which means that I would have to basically prepare a plan for the things that I’ll do online including Web sites which I would have to visit including a set of emails which I would have to send to a set of people including friends and colleagues.

It’s been years since he prepared to acquire a personal computer and get connected meaning that he managed to prepare a list of Web sites and newsgroups on the topic of hacking and computer security including general Web sites that he would eventually visit. Among the first Web sites that he visited was NBA.com where he would quickly learn about the latest developments on his favorite team including daily going through photos and possibly video material to showcase his favorite team at the time. Among the most venerable experienced he first discovered prior to getting connected is to search for UFO photos and information on the KGB including the active reproduction of sound using his external speakers in a MIDI-dominated World at the time. The most venerable and unforgettable experience at the time was the fact that he had access to an email which he used to keep in touch with the Internet Service Provider’s system administrator so that he could keep in touch with him including the active sharing of new Web site links for him to visit and exchange communication.

Among the next most prominent and key features of the Internet which I used at the time was ICQ in particular the fact that the messages from my hometown traveled to the capital of the country in real-time which was particularly impressive in particular the fact that I was receiving immediate responses to my messages. It was fairly logical to conclude that the active exchange of messages on ICQ and actual contacts was crucial to becoming popular and actually attempting to own the Scene. What I practically did at the time was to request several of my friends which were known to have been involved in the Scene at the time to forward and exchange a decent set of ICQ contacts of fellow members of the Scene which quickly empowered me with the necessary contacts to join several hacking groups in particular HackHouse and the Social Engineering Project where I was proud to be a member of.

Among the first groups which I really joined at the time was Toxic Crisco which basically represented a group of individuals involved in a variety of online activities including possibly hacking including the SCR Project which was basically a social engineering driven hacking group where I was proud to be a member of in particular my active involvement in reading various high-profile psychology books at the time.

For the purpose of using IRC in particular DALnet Dancho quickly gathered a copy of the popular mIRC including several War Scripts ICQ Bombers Nukers and Mail Bombers including trojan horses and quickly decided that he should start getting experienced in the world of hacking for the purpose of gaining knowledge and impressing his friends. Among the first channels that he actually joined at the time were #gay and #lesbian where he was basically portraying himself as another person who was basically seeking to offer a new and novel photos-based screensaver to a variety of individuals for the purpose of tricking them into executing the screensaver on their home PCs ultimately gaining access to their PCs using a popular trojan horse client at the time such as for instance Sub7.

It would be fairly easy to assume how things got complicated with Dancho quickly obtaining access to Internet Relay Chat’s primary mIRC application including a variety of IRC-based “War Scripts” including a dozen of mail-bombers and various other ICQ-based type of Nukers and Flooders on his way to demonstrate a proper technical know-how to his friends and peers in the shady world of hacking. Among the first channels he tried to access were #hacker #hackers

#hacking and the infamous #hackphreak on EFNet including to actually open several personal channels on the local IRC networks including #drugs #KGB and #linuxsecurity. At a later stage he actually managed to ask a friend for a possible operator status on the local town’s IRC

channel where he was basically running a 24/7 online protection bot known as xploit including the active use of a Socks5 server which at the time was offered by his employer LockDownCorp where he was busy acting as Technical Collector of trojan horses/worms/viruses and VBS scripts for the purpose of improving the anti-trojan software’s signatures-based detection rates.

Among the first thing that Dancho decided to do in his spare time is to actively research the local Webmaster of his hometown’s official Web site for the purpose of attempting to launch a social engineering attack against his local town’s official Web site which basically succeed and resulted in a “greeting” message being posted on the official Web site with no actual data destruction and data removal taking place in what would appear to be a professional approach when compromising a legitimate Web site for the purpose of greeting his personal friends and spread a message on behalf of “Trojan Hacking Group” which at the time basically consisted of one of his closest friends and another fellow hacker enthusiast.

Among his responsibilities the time included the active collection of trojan horses/worms/viruses and VBS Scripts with the idea to share them with his employer which at the time was LockDownCorp one of the world’s leading anti-trojan vendors for the purpose of improving the detection rate for these publicly accessible trojan horses in what would later on mature into a successful Technical Collection operation which basically paid his bills and actually offered him a decent financial incentive to continue getting involved in security as a hacker enthusiast and actually improved his employer’s overall detection rate for some of the most prolific trojan horses at the time.

The actual contractual agreement had to do with Danchousing a private FTP server where he would spend hours uploading collected trojan horses using his home-based dial-up connection and eventually earning a revenue in the process using Western Union where he was happy to have established direct working relationship with one of the world’s leading anti-trojans vendors which at the time was located at — http://proxy2.stealthedip.com/maniac/incoming/

Whenever Dancho would attempt to reach out to his friends he would attempt to find out whether they are online using a popular trojan horse including to actually check his email account for their recently changed passwords and other related information including their current IP so that he can properly connect to their home PC for educational purposes.

Being the World’s most notable cybercrime researcher security blogger and threat intelligence analyst the researcher quickly gained fame by systematically and efficiently profiling and analyzing a decent snapshot of malicious nation-state and fraudulent activity online leading him to pursue a successful career as the World’s most popular cybercrime researcher security blogger and threat intelligence analyst.

In an early Monday morning the researcher quickly gathered a set of research materials of the primary botnet that’s he’s been monitoring the infamous Koobface botnet using passive and active virtual SIGINT methodologies which basically include active sampling of the botnet’s malicious online activities using a daily set of intercepted malicious and fraudulent campaigns launched managed and operated by the Koobface botnet for the purpose of providing the necessary technical operational and strategic OSINT type of intelligence including the daily batch of money mule recruitment domains and campaigns which he was busy profiling with the idea to assist U.S Law Enforcement on its way to track down and prosecute the cybercriminals behind these campaigns.

The Koobface botnet was the primary botnet propagating over social media at the time in particular Facebook and has already managed to affect tens of thousands of users globally potentially enticing them to interact with rogue and visual social engineering based type of malicious and fraudulent campaigns in the form of Fake Adobe Flash Players and fake YouTube videos where the ultimate goal would be to attempt to affect their friends on Facebook by sending automated and legitimately looking messages including links to rogue and malicious content.

It’s been years since he prepared to acquire a personal computer and get connected meaning that he managed to prepare a list of Web sites and newsgroups on the topic of hacking and computer security including general Web sites that he would eventually visit. Among the first Web sites that he visited was NBA.com where he would quickly learn about the latest developments on his favorite team including daily going through photos and possibly video material to showcase his favorite team at the time. Among the most venerable experienced he first discovered prior to getting connected is to search for UFO photos and information on the KGB including the active reproduction of sound using his external speakers in a MIDI-dominated World at the time.

The most venerable and unforgettable experience at the time was the fact that he had access to an email which he used to keep in touch with the Internet Service Provider’s system administrator so that he could keep in touch with him including the active sharing of new Web site links for him to visit and exchange communication.It’s been years since he prepared to acquire a personal computer and get connected meaning that he managed to prepare a list of Web sites and newsgroups on the topic of hacking and computer security including general Web sites that he would eventually visit. Among the first Web sites that he visited was NBA.com where he would quickly learn about the latest developments on his favorite team including daily going through

photos and possibly video material to showcase his favorite team at the time. Among the most venerable experienced he first discovered prior to getting connected is to search for UFO photos and information on the KGB including the active reproduction of sound using his external speakers in a MIDI-dominated World at the time. The most venerable and unforgettable experience at the time was the fact that he had access to an email which he used to keep in touch with the Internet Service Provider’s system administrator so that he could keep in touch with him including the active sharing of new Web site links for him to visit and exchange communication.

Among the next most prominent and key features of the Internet which I used at the time was ICQ in particular the fact that the messages from my hometown traveled to the capital of the country in real-time which was particularly impressive in particular the fact that I was receiving immediate responses to my messages. It was fairly logical to conclude that the active exchange of messages on ICQ and actual contacts was crucial to becoming popular and actually attempting to own the Scene. What I practically did at the time was to request several of my friends which were known to have been involved in the Scene at the time to forward and exchange a decent set of ICQ contacts of fellow members of the Scene which quickly empowered me with the necessary contacts to join several hacking groups in particular HackHouse and the Social Engineering Project where I was proud to be a member of.

Among the next most prominent and key features of the Internet which I used at the time was ICQ in particular the fact that the messages from my hometown traveled to the capital of the country in real-time which was particularly impressive in particular the fact that I was receiving immediate responses to my messages. It was fairly logical to conclude that the active exchange of messages on ICQ and actual contacts was crucial to becoming popular and actually attempting to own the Scene. What I practically did at the time was to request several of my friends which were known to have been involved in the Scene at the time to forward and exchange a decent set of ICQ contacts of fellow members of the Scene which quickly empowered me with the necessary contacts to join several hacking groups in particular HackHouse and the Social Engineering Project where I was proud to be a member of.

Among the next most prominent and key features of the Internet which I used at the time was ICQ in particular the fact that the messages from my hometown traveled to the capital of the country in real-time which was particularly impressive in particular the fact that I was receiving immediate responses to my messages. It was fairly logical to conclude that the active exchange of messages on ICQ and actual contacts was crucial to becoming popular and actually attempting to own the Scene. What I practically did at the time was to request several of my friends which were known to have been involved in the Scene at the time to forward and exchange a decent set of ICQ contacts of fellow members of the Scene which quickly empowered me with the necessary contacts to join several hacking groups in particular HackHouse and the Social Engineering Project where I was proud to be a member of.

Among the first groups which I really joined at the time was Toxic Crisco which basically represented a group of individuals involved in a variety of online activities including possibly hacking including the SCR Project which was basically a social engineering driven hacking group where I was proud to be a member of in particular my active involvement in reading various high-profile psychology books at the time.

For the purpose of using IRC in particular DALnet Dancho quickly gathered a copy of the popular mIRC including several War Scripts ICQ Bombers Nukers and Mail Bombers including trojan horses and quickly decided that he should start getting experienced in the world of hacking for the purpose of gaining knowledge and impressing his friends. Among the first channels that he actually joined at the time were #gay and #lesbian where he was basically portraying himself as another person who was basically seeking to offer a new and novel photos-based screensaver to a variety of individuals for the purpose of tricking them into executing the screensaver on their home PCs ultimately gaining access to their PCs using a popular trojan horse client at the time such as for instance Sub7.

Among the first groups which I really joined at the time was Toxic Crisco which basically represented a group of individuals involved in a variety of online activities including possibly hacking including the SCR Project which was basically a social engineering driven hacking group where I was proud to be a member of in particular my active involvement in reading various high-profile psychology books at the time.

On a beautiful Thursday afternoon Dancho decided to play a decent computer game while his mother was busy ironing in the kid’s room and decided to take a journey successfully getting the World rid of hostile aliens. The game called Duke Nukem basically took Dancho on a journey to another World where he spend most of his afternoon getting rid of evil aliens while he led a discussion with his mother on his whereabouts during the day including active next-day class preparation and the eventual dinner conversation. While mom was busy ironing Dancho took on another journey to a distant World where he took care of and protected the Earth from evil aliens and decided that the time has come for a rest.

Some of the most memorable memories of Dancho back in the time have to do with playing full-time one of the best strategy games during the 90’s that’s Sid Meier’s Civilization. Spending a decent portion of his time basically four hours on a daily basis Dancho quickly acquired the necessary skills to take his civilization to a new level by waging wars developing and exchanging new technologies and by waging wars with competing and adversary civilizations.

Having already mastered the power of the Civilization game Dancho quickly fell into a World of politics technologies and wars and successfully mapped and left a foothold in the World the way he knew and mastered having successfully spend a decent portion of his time playing the best strategy game during the 90’s that’s Sid Meier’s Civilization. Game World is something different.

Whenever Dancho decided to play a game the World came to a halt with Dancho playing and learning the basics and inner workings of every game that he managed to get his hands on throughout the 90’s.

Pushing the boundaries of the game at some point Dancho decided to take a deeper look at how you can actually make the computer’s player become more advanced and sophisticated and actually tried to train the AI of the game and potentially figured out a way to teach to use advanced warfare tactics.

It would be fairly easy to assume how things got complicated with Dancho quickly obtaining access to Internet Relay Chat’s primary mIRC application including a variety of IRC-based “War

Scripts” including a dozen of mail-bombers and various other ICQ-based type of Nukers and Flooders on his way to demonstrate a proper technical know-how to his friends and peers in the shady world of hacking. Among the first channels he tried to access were #hacker #hackers

#hacking and the infamous #hackphreak on EFNet including to actually open several personal channels on the local IRC networks including #drugs #KGB and #linuxsecurity. At a later stage he actually managed to ask a friend for a possible operator status on the local town’s IRC

channel where he was basically running a 24/7 online protection bot known as xploit including the active use of a Socks5 server which at the time was offered by his employer LockDownCorp where he was busy acting as Technical Collector of trojan horses/worms/viruses and VBS scripts for the purpose of improving the anti-trojan software’s signatures-based detection rates.

Among the first thing that Dancho decided to do in his spare time is to actively research the local Webmaster of his hometown’s official Web site for the purpose of attempting to launch a social engineering attack against his local town’s official Web site which basically succeed and resulted in a “greeting” message being posted on the official Web site with no actual data destruction and data removal taking place in what would appear to be a professional approach when compromising a legitimate Web site for the purpose of greeting his personal friends and spread a message on behalf of “Trojan Hacking Group” which at the time basically consisted of one of his closest friends and another fellow hacker enthusiast.

Among his responsibilities the time included the active collection of trojan horses/worms/viruses and VBS Scripts with the idea to share them with his employer which at the time was LockDownCorp one of the world’s leading anti-trojan vendors for the purpose of improving the detection rate for these publicly accessible trojan horses in what would later on mature into a successful Technical Collection operation which basically paid his bills and actually offered him a decent financial incentive to continue getting involved in security as a hacker enthusiast and actually improved his employer’s overall detection rate for some of the most prolific trojan horses at the time.

The actual contractual agreement had to do with Dancho using a private FTP server where he would spend hours uploading collected trojan horses using his home-based dial-up connection and eventually earning a revenue in the process using Western Union where he was happy to have established direct working relationship with one of the world’s leading anti-trojans vendors which at the time was located at — http://proxy2.stealthedip.com/maniac/incoming/

Whenever Dancho would attempt to reach out to his friends he would attempt to find out whether they are online using a popular trojan horse including to actually check his email account for their recently changed passwords and other related information including their current IP so that he can properly connect to their home PC for educational purposes.

Being the World’s most notable cybercrime researcher security blogger and threat intelligence analyst the researcher quickly gained fame by systematically and efficiently profiling and analyzing a decent snapshot of malicious nation-state and fraudulent activity online leading him to pursue a successful career as the World’s most popular cybercrime researcher security blogger and threat intelligence analyst.

Back in 2007 I got a direct invitation to attend a private and invite-only conference event held by the Honeynet Project at the U.K’s GCHQ which I actually attended and presented on a variety of topics including current and emerging cybercrime trends and actually got the opportunity to meet with the folks from the Honeynet Project.

In 2008 I got a surprise invitation to join the team at ZDNet a web site portal which I greatly admired while I was busy working for https://astalavista.com and I was in fact visiting on a daily basis where I spend a highly professional and productive 4 years as a security blogger at ZDNet’s Zero Day blog leading to me to thousands of publications including an actual award-winning Jessy H. Neal Award for working on ZDNet’s Zero Day blog.

Working for ZDNet greatly shaped my professional well-being in a way that I was basically working with top-notch technology experts from across the globe and actually had the chance to contribute with personal content and research for a period of four years which was an unforgettable experience and it’s still a pleasure and a honor to touch base and actually find a way to contribute and say hi to the people that I used to work with back in 2008.

At some point in time I eventually got invited to attend a private and invite-only conference where I presented on money mule recruitment practices and eventually got the privilege to meet most of the people that I work with on a face-to-face basis where we hang out and actually socialized and discussed various hot topics and cybercrime trends internationally.

Dancho began his career in the world of Intelligence Studies greatly provoked by research published and distributed by a U.S based company known as iDefense which basically specializes in profiling online hacktivism activity and is basically capable of producing high-quality and never-published before threat intelligence and general intelligence briefs. Among the key reports that Dancho was able to get his hands on was the U.S/China skirmish which basically consisted of various U.S and Chinese based groups actively interacting online by launching DDoS (Distributed Denial of Service) attacks against their infrastructure and participating in Web site defacement campaigns. He would then research and actively visit the CIA.gov’s official Web site including FAS.org and NSA.gov seeking manuals and research material on Open Source Intelligence (OSINT) which would later on greatly contribute to help him become one of the World’s leading experts in the field of cybercrime research and threat intelligence gathering.

In an early Monday morning the researcher quickly gathered a set of research materials of the primary botnet that’s he’s been monitoring the infamous Koobface botnet. His main motivation behind tracking down and monitoring one of the most prolific botnet that was spreading across Facebook at the time was to assist the Security Industry and researchers internationally including U.S law enforcement on their way to keep track of the botnet’s activities and eventually attempt to take it offline and actually attempt to track down some of the authors behind it.

Dancho’s daily routine consisted of checking the most recent campaigns launched by the gang and actually offer in-depth technical analysis on the latest campaigns publicly disseminating and profiling the campaigns at his personal blog leading him to a specific set of detailed and in-depth





analysis of the Koobface botnet one of the few publicly accessible analysis resources on the topic at the time.

The botnet masters at the time were basically known to keep track of Dancho’s research and eventually left a message embedded in the actual C&C infrastructure basically greeting the researcher for his research including a second and a third message during the Christmas season including an actual point-by-point response to his “Top 10 Things You Didn’t Know About the Koobface Gang” article which he published at ZDNet’s Zero Day blog.

At a later stage he would present his findings in a Keynote Presentation at CyberCamp 2016 on the topic of “Exposing Koobface — The World’s Largest Botnet” in front of a high-quality audience and actually discuss in-depth how he tracked it down and eventually attempted to take it offline.

While he was busy studying in the Netherlands he became familiar what appeared to be one of the most popular Web sites for hackers on the Web known as Astalavista.com where he managed to actually find the real company behind the portal and actually approached.

Getting Connected

Provoked by the need to reach out to a vast network of computers known as the Internet - Sten quickly decided that the time has come to get connected - so that he decided to seek a proper connection provider in his local home-town. Back in the day the primary connection providers in the time were Bulgaria’s Digital Systems BIA Net and the country’s leading mobile connectivity provider - Mtel’s pre-paid dial-up cards. Times were different in terms of connectivity and DSL

and ADSL were a dream come true in the face of corporate networks properly utilizing and using ISDN type of based connectivity. Keeping it simple - Sten decided to quickly acquire the necessary dial-up modem - which he would eventually fall in love with potentially reaching out to a vast network of computers known as the Internet using the help of a local dial-up provider known as Digital Systems. Back in the day - hourly based dial-up access meant think twice about what you do and how you do it online which means that I would have to basically prepare a plan for the things that I’ll do online including Web sites which I would have to visit including a set of emails which I would have to send to a set of people including friends and colleagues.

It’s been years since he prepared to acquire a personal computer and get connected meaning that he managed to prepare a list of Web sites and newsgroups on the topic of hacking and computer security including general Web sites that he would eventually visit. Among the first Web sites that he visited was NBA.com where he would quickly learn about the latest developments on his favorite team including daily going through photos and possibly video material to showcase his favorite team at the time. Among the most venerable experienced he first discovered prior to getting connected is to search for UFO photos and information on the KGB including the active reproduction of sound using his external speakers in a MIDI-dominated World at the time. The most venerable and unforgettable experience at the time was the fact that he had access to an email which he used to keep in touch with the Internet Service Provider’s system administrator





Bogdan Dochev so that he could keep in touch with him including the active sharing of new Web site links for him to visit and exchange communication.

Among the next most prominent and key features of the Internet which I used at the time was ICQ in particular the fact that the messages from my hometown traveled to the capital of the country in real-time which was particularly impressive in particular the fact that I was receiving immediate responses to my messages. It was fairly logical to conclude that the active exchange of messages on ICQ and actual contacts was crucial to becoming popular and actually attempting to own the Scene. What I practically did at the time was to request several of my friends which were known to have been involved in the Scene at the time to forward and exchange a decent set of ICQ contacts of fellow members of the Scene which quickly empowered me with the necessary contacts to join several hacking groups in particular HackHouse and the Social Engineering Project where I was proud to be a member of.

Among the first groups which I really joined at the time was Toxic Crisco which basically represented a group of individuals involved in a variety of online activities including possibly hacking including the SCR Project which was basically a social engineering driven hacking group where I was proud to be a member of in particular my active involvement in reading various high-profile psychology books at the time.

For the purpose of using IRC in particular DALnet Stan quickly gathered a copy of the popular mIRC including several War Scripts ICQ Bombers Nukers and Mail Bombers including trojan horses and quickly decided that he should start getting experienced in the world of hacking for the purpose of gaining knowledge and impressing his friends. Among the first channels that he actually joined at the time were #gay and #lesbian where he was basically portraying himself as another person who was basically seeking to offer a new and novel photos-based screensaver to a variety of individuals for the purpose of tricking them into executing the screensaver on their home PCs ultimately gaining access to their PCs using a popular trojan horse client at the time such as for instance Sub7.

Owning the Game

On a beautiful Thursday afternoon Stan decided to play a decent computer game while his mother was busy ironing in the kid’s room and decided to take a journey successfully getting the World rid of hostile aliens. The game called Duke Nukem basically took Stan on a journey to another World where he spend most of his afternoon getting rid of evil aliens while he led a discussion with his mother on his whereabouts during the day including active next-day class preparation and the eventual dinner conversation. While mom was busy ironing Stan took on another journey to a distant World where he took care of and protected the Earth from evil aliens and decided that the time has come for a rest.

Some of the most memorable memories of Sten back in the time have to do with playing full-time one of the best strategy games during the 90’s that’s Sid Meier’s Civilization. Spending a decent portion of his time basically four hours on a daily basis Sten quickly acquired the





necessary skills to take his civilization to a new level by waging wars developing and exchanging new technologies and by waging wars with competing and adversary civilizations.

Having already mastered the power of the Civilization game Sten quickly fell into a World of politics technologies and wars and successfully mapped and left a foothold in the World the way he knew and mastered having successfully spend a decent portion of his time playing the best strategy game during the 90’s that’s Sid Meier’s Civilization. Game World is something different.

Whenever Sten decided to play a game the World came to a halt with Sten playing and learning the basics and inner workings of every game that he managed to get his hands on throughout the 90’s.

Pushing the boundaries of the game at some point Stan decided to take a deeper look at how you can actually make the computer’s player become more advanced and sophisticated and actually tried to train the AI of the game and potentially figured out a way to teach to use advanced warfare tactics.

The primary source of new games which were basically coming from Russian-distributed CDs at the time was Pavel Vitkov a close friend to Dancho who was actually possessing and was able to negotiate and obtain some of the latest and most popular games worth playing at the time. While Dancho was busy becoming a master of Sid Meier’s Civilization most of his friends and colleagues at the time were busy playing another game part of the franchise known as Colonization which despite the fact that it was pretty similar to Sid Meier’s Civilozation couldn’t really offer the necessary global politics and war strategy tactics including possible espionage tactics which Dancho was looking for in a modern game at the time.

Online is Trouble

It would be fairly easy to assume how things got complicated with Sten quickly obtaining access to Internet Relay Chat’s primary mIRC application including a variety of IRC-based “War Scripts” including a dozen of mail-bombers and various other ICQ-based type of Nukers and Flooders on his way to demonstrate a proper technical know-how to his friends and peers in the shady world of hacking. Among the first channels he tried to access were #hacker #hackers

#hacking and the infamous #hackphreak on EFNet including to actually open several personal channels on the local IRC networks including #drugs #KGB and #linuxsecurity. At a later stage he actually managed to ask a friend for a possible operator status on the local town’s IRC

channel where he was basically running a 24/7 online protection bot known as xploit including the active use of a Socks5 server which at the time was offered by his employer LockDownCorp where he was busy acting as Technical Collector of trojan horses/worms/viruses and VBS scripts for the purpose of improving the anti-trojan software’s signatures-based detection rates.

Sample Socks5 Commercially-available servers courtesy of LockDownCorp one of Stan’s current employers at the time which he used to increase his reputation on the local IRC Network and to actually hide his real IP





Among the first thing that Stan decided to do in his spare time is to actively research the local Webmaster of his hometown’s official Web site for the purpose of attempting to launch a social engineering attack against his local town’s official Web site which basically succeed and resulted in a “greeting” message being posted on the official Web site with no actual data destruction and data removal taking place in what would appear to be a professional approach when compromising a legitimate Web site for the purpose of greeting his personal friends and spread a message on behalf of “Trojan Hacking Group” which at the time basically consisted of one of his closest friends and another fellow hacker enthusiast.

Among his responsibilities the time included the active collection of trojan horses/worms/viruses and VBS Scripts with the idea to share them with his employer which at the time was LockDownCorp one of the world’s leading anti-trojan vendors for the purpose of improving the detection rate for these publicly accessible trojan horses in what would later on mature into a successful Technical Collection operation which basically paid his bills and actually offered him a decent financial incentive to continue getting involved in security as a hacker enthusiast and actually improved his employer’s overall detection rate for some of the most prolific trojan horses at the time.

The actual contractual agreement had to do with Stan using a private FTP server where he would spend hours uploading collected trojan horses using his home-based dial-up connection and eventually earning a revenue in the process using Western Union where he was happy to have established direct working relationship with one of the world’s leading anti-trojans vendors which at the time was located at - http://proxy2.stealthedip.com/maniac/incoming/

Whenever Stan would attempt to reach out to his friends he would attempt to find out whether they are online using a popular trojan horse including to actually check his email account for their recently changed passwords and other related information including their current IP so that he can properly connect to their home PC for educational purposes.

The primary purpose for connecting to a friend’s PC using a popular trojan horse would be purely for educational purposes with no actual hard or any sort of eavesdropping taking place.

Owning the Scene

While Dancho was busy studying in the Netherlands he was busy persistently checking one of the World’s most popular and high-trafficked Web sites for hackers and security experts -

Astalavista.com - and sticking to the common wisdom circa the 90‘s where everyone was busy making contributions and launching new groups - he decided to approach the company behind the portal with a possible business proposal that basically consisted of having him monitor and actually maintain the portal in terms of content including the actual production of a high-profile Security Newsletter where we would produce security and hacking articles including a featured Security Interview with key members from the Scene and the Security Industry.

Prior to getting a confirmation from a Team Member of the actual owner of the portal at the time Dancho quickly began entering into negotiations about a possibly paid including a free venture at

the time where he could earn a small comission for producing a high-quality security newsletter and actually be responsible for all the security and hacking content at Astalavista.com on a monthly and daily basis.

As he began working on the monthly newsletter the first issue including the remaining twenty six issues which he produced over a period of three years were quite a success including the actual Geeky Photos section where portal users could send in photos of their desktop computers for the purpose of featuring them at the Web site potentially promoting their desktop setups to our audience at the time eventually leading him and the portal to win a PCMagaine Top 100 Security Sites Award back in 2005.

Among Dancho’s main responsibilities at the time where the daily updating of the portal with high quality security documents tools and presentations including actual hacking and security links and overall responsibility for all the content at the Web site including the production of a highly popular security newsletter at the time including to actually answer and work on possible partnership and advertising inquiries at the time which led to a successful repositioning of the portal as one of the primary information security portal services online.

Among the key folks and individuals that he interviewed during his management of Astalavista.com and asked some pretty decent and relevant questions at the time include:



Proge, Progenic.com



Jason Scott, TextFiles.com



Kevin Townsend, ITSecurity.com



Richard Menta, BankInfoSecurity.com



Mr. Yowler, Cyberarmy.net



Prozac, Astalavista.com



Candid Wuest, Security Researcher



Anthony Aykut from Frame4.com



Dave Wreski from LinuxSecurity.com



Mitchell Rowton from SecurityDocs.com



SnakeByte from Snake-Basket.de



Björn Andreasson from WarIndustries.com



Bruce from DallasCon.com



Nikolay Nedyalkov from ISECA.org



Roman Polesek from Hakin9.org



John Young from Cryptome.org



Eric Goldman EricGoldman.org



Robert, CGISecurity.com



Johannes B. Ullrich, CTO of the Sans Internet Storm Center, and the main developer behind the Dshield.org project



Daniel Brandt, Google-Watch.org



David Endler, TippingPoint.com



Vladimir, 3APA3A, Security.nnov.ru



Johnny Long, johnny.ihackstuff.com



Martin Herfurt, Trifinite.org





My Personal Blog

It used to be a decent period of time back in December, 2005 when I was originally planning to launch my personal blog while working as a Managing Director for the infamous

https://astalavista.com also known as Astalavista Security Group.

Astalavista Security Group was one of the Web’s primary and most popular hacking and security portals in the world back in 1997 which I undertook in terms of content throughout the period of 2003-2006 for the position of Managing Director where I was also responsible for the release of a monthly Security Newsletter to approximately 22,000 subscribers including a featured Security Interview every month.

The Russian Business Network

Jessus. Who would have thought? At a specific point in my time and my career as a cybercrime fighter and cybercrime researcher including OSINT analyst and threat intelligence analyst at some point in time after approximately a decade in fighting bad guys and actually tracking them down and exposing their infrastructure I finally got a very interesting email which was basically a screenshot courtesy of a Russian Business Network franchise member that was basically showcasing ownership over their primary domain which was nearly impossible to receive and in specific the fact that the original and primary Russian Business Network franchise domain name doesn’t really exist in the context of having virtual no clues of its online existence which was quite a remarkable success in the context that it would have motivated many to pursue a pension in the field which basically included the actual message saying “hi” and greeting me which was quite a success at the time in the context of receiving a personal message from the Russian Business Network franchise proving ownership of their primary domain name.

How did I originally stumbled upon the Russian Business Network? It was by going through other people’s research on the topic and basically by doing my job at the time which was quite a success in terms of daily monitoring for malicious and fraudulent online activity which led me to stumble upon their malicious infrastructure on numerous occasions in specific to find out more about their rogue and malicious bulletproof hosting infrastructure which used to dominate the threat landscape at the time in terms of popularity and the primary bulletproof hosting provider for a variety of cybercriminals internationally.

I was also originally inspired by the usual source of inspiration for me which was basically iDefense actual threat research reports at the time that were basically going a step beyond the typical threat intelligence reports and were basically including all the necessary and in-depth details on various cyber threat actors at the time including primary sources of cybercrime activity internationally.

The Koobface Botnet





Back in the day my primary area of occupation was to monitor and track down the Koobface botnet where I was basically acting as the primary source of real-time and actionable intelligence on the whereabouts of the Koobface botnet including to actually profile and analyze some of their latest campaigns which led to a variety of pretty interesting situations where they’ve actually redirected Facebook’s entire IP space to my personal blog including to actually leave several greeting within the botnet’s C&C channel in terms of sending me a message and greeting me including a step by step response to my “Top 10 Things You Didn’t Know About the Koobface Gang” article where they actually responded to my ZDNet article at the time in a step by step fashion.

At a specific point in time I was originally invited to held the Keynote presentation at the CyberCamp 2016 security conference where I presented on the topic of tracking down and monitoring the Koobface one of the world’s largest botnets which was a tremendous success in the context of communicating most of my research to a wider audience.

Back in 2011 while I was busy living in another town I actually met with a NYTime reporter for the purpose of catching up and elaborating more on my research on the Koobface botnet which was quite a success in terms of communicating my findings to a proper party which eventually led to a high-profile quote on my research on the Koobface botnet in the original NYTimes.com At a specific point in time my primary area of occupation included the active monitoring and taking down of the Koobface botnet which at the time was the only active social media propagating botnet that was successfully targeting Facebook in terms of spreading malicious software across the social media platform successfully affecting its users.

The gang then continued its underground marketplace activities by starting to serve client-side exploits to users visiting major Koobface Web properties that also includes fake YouTube including Flash Player serving Web sites part of the Koobface botnet.

Following a series of messages left on the actual C&C (Command and Control) server locations which were basically greeting me and referencing my research at the time including a series of typosquatted domains using my name at some point in time I managed to actually come up with a proper “Top 10 Things You Didn’t Know About the Koobface Gang” article for ZDNet at the time wheret the botnet masters actually left a message within the C&C (Command and Control) server location basically answering the key points on a point by point basis which was quite a success at the time of monitoring and tracking down the Koobface botnet.

Getting in Trouble

Being the World’s most notable cybercrime researcher security blogger and threat intelligence analyst the researcher quickly gained fame by systematically and efficiently profiling and analyzing a decent snapshot of malicious nation-state and fraudulent activity online leading him to pursue a successful career as the World’s most popular cybercrime researcher security blogger and threat intelligence analyst.

In an early Monday morning the researcher quickly gathered a set of research materials of the primary botnet that’s he’s been monitoring the infamous Koobface botnet using passive and active virtual SIGINT methodologies which basically include active sampling of the botnet’s malicious online activities using a daily set of intercepted malicious and fraudulent campaigns launched managed and operated by the Koobface botnet for the purpose of providing the necessary technical operational and strategic OSINT type of intelligence including the daily batch of money mule recruitment domains and campaigns which he was busy profiling with the idea to assist U.S Law Enforcement on its way to track down and prosecute the cybercriminals behind these campaigns.

The Koobface botnet was the primary botnet propagating over social media at the time in particular Facebook and has already managed to affect tens of thousands of users globally potentially enticing them to interact with rogue and visual social engineering based type of malicious and fraudulent campaigns in the form of Fake Adobe Flash Players and fake YouTube videos where the ultimate goal would be to attempt to affect their friends on Facebook by sending automated and legitimately looking messages including links to rogue and malicious content.

What what particularly interesting about the Koobface botnet at the time was the easy to track down and monitor actual C&C and campaign infrastructure where I was busy tracking it down and publishing my findings on a daily basis for the purpose of empowering my blog readers and the security community with the necessary threat intelligence on the actual whereabouts of the Koobface botnet in terms of offering as much technical details as possible with the idea to profile and keep track of its campaigns potentially assisting Facebook at the time including fellow security researchers on their way to track down and monitor the campaign.

It used to be a moment in time when I was busy practically commanding a vast network of loyal readers through the direct and persistent distribution of my high-quality research to a network of my blog readers where the ultimate idea was to spread a message and to actually communicate my research and blog posts to as many people as possible.

Back in the day I had approximatelly 11,000 Twitter followers and approximatelly 7,000 RSS

blog readers which is quaite impressive for a one-man operation since December, 2005 when I originally launched my personal blog (https://ddanchev.blogspot.com). A couple of years later I realized that I’ve participated in a Top Secret GCHQ Program called “Lovely Horse” which aims to utilize publicly accessible sources of information for cyber defense purposes also known as OSINT for cyber defense which was quite a success at the time and it was a privilege and an honor to participate in the program.

It took me a couple of hours to successfully track down and monitor the Koobface botnet which led me to publish an OSINT analysis which basically offered an in-depth personally identifiable information on one of its botnet masters which was quite a success at the time and led me to a DW interview including a reference in a NYTimes article on the topic. Back in the day I was the primary source of information on the Koobface botnet where my primary responsibilities included the daily monitoring of the newly launched campaigns where the ultimate goal was to





offer an in-depth technical and enriched information on the currently circulating campaigns where the ultimate goal was to attempt to profile and also attempt to take them offline.

Throughout my Koobface investigations and research I once got a personal message from the Koobface gang which was embedded within the actual C&C infrastructure and was basically greeting me including several C&C server domains which were typosquatted using my name.

Presentations and Events

Among my most recent accomplishments in the field of conference events and presentations include my appearance at Bulgaria’s flaship Cyber Security Talks event where I held a presentation in front of approximately eighty people and did my best to properly present my experience and expertise in the field where I also got the chance to meet and socialize with a lot of interesting people and folks interested in the topic.

Among my other conference and event attendance achievements includes the visiting and making a presentation at U.K’S GCHQ where I got invited to make a presentation with the Honeynet Project back in 2008.

Yet another presentation and conference event attendance achievements was to meet with some of my primary colleagues and friends from the industry at an invite only conference event back in 2010 where I held a presentation on the topic of money mule recruitment and the actual ecosystem behind the process.

OPSEC Failure

Consider obtaining one of the following “stripped” mobile devices in terms of hardened mobile OS offering in-depth and multi-layered security and privacy protection features for the purpose of bypassing wide-spread surveillance techniques and techniques. Ensuring that you possess a

“stripped” mobile device is crucial for ensuring the necessary degree of personal privacy to stay ahead of current and emerging Cyber Threats including wide-spread privacy violations courtesy of the U.S Intelligence Community and various other nation-state and rogue actors including cybercriminals.

The next logical step would be to ensure that the metadata on the device in terms of Web browsing including possible public and proprietary service use is properly obfuscated. Among the primary concerns whenever you choose to obfuscate a particular set of data would be possible supply-chain infiltration on behalf of the U.S Intelligence community in particular purchase orders that would further allow me to collerate and potentially identify a particular end user based on the actual supply-chain infiltration. One of the primary concerns in today’s modern Internet world largely dominated by wide-spread surveillance courtesy of the U.S Intelligence Community including rogue and potentially malicious actors including nation-state and cybercriminals is the direct exposing of an individual’s private network including possible collerated-based events that could potentially identify and track down a particular individual.





In terms of mobile device obfuscation the end user is largely advised to take advantage of personal firewall for the purpose of monitoring outgoing and incoming connections on the device in particularly blocking all-incoming connections and closely monitoring outgoing connections.

Furthermore, what an end user can potentially do in terms of hardening their mobile device is to ensure that it does not leak back any internal IP addresses including possibly the device MAC

address potentially exposing the device user’s internal and private network potentially falling victim to “ABSOLINE EPILSON” type of end point and mobile device targeting type of attacks and campaigns courtesy of the U.S Intelligence Community including other rogue factors including nation-state actors and cybercriminals in general. How you should proceed in order to archive this process? Keep reading.

Next to the general use of “stripped” mobile devices end users should also consider the following highly recommended tactics techniques and procedures for the purpose of protecting their IP

(Intellectual Property) including their mobile device and end point device’s confidentiality availability and integrity.

The next logical step would be to stay away from mainstream mobile devices citing potential Security and Privacy in mind including the use of a properly selected VPN service provider for the purpose of applying basic traffic obfuscation techniques including end-point network isolation in this particular context the end user and the organization should definitely look forward to implement a possible VPN provider actually “mixing” public legitimate jurisdiction-aware infrastructure with privacy-aware public or proprietary network technology - in this particular case VPN2Tor type of technology.

Windows-based users should definitely consider using and learning how to use the Advanced Tor Router application which basically offers a diverse set of unique privacy-enhancing and privacy-preserving featuring while utilizing the Tor Network further ensuring and offering a free solution for end users interested in preserving their Web browsing activities including possible network-wide Tor Network adoption on per OS and on per application-based basis. What does this application has to offer in terms of unique privacy-preserving features? Basically it offers a variety of unique and never presented or discussed before type of Tor-Network and end-point privacy-enhancing or preserving features further ensuring that the end user will remain properly protected from sophisticated network-based and client-based type of attack campaigns potentially aiming to identify and expose their identity. What’s worth emphasizing on in terms of the application is the unique set of privacy-preserving and oriented client-side feature in terms of possibly privacy-oriented and secure browsing experience.

What would be an appropriate choice for a VPN-provider basically offering the necessary peace of mind in terms of network-based connectivity with privacy-enabled solutions in mind in terms of possible no-logs policy including related value-added features further enhancing the necessary privacy-based no-logs policy in today’s modern Internet World with widespread surveillance and privacy-violations courtesy of the U.S Intelligence Community and various other rogue actors including nation-state and cybercriminals in general? Keep reading.

Trying to Go Back Online





Among the first things that I did prior to trying to pop up online back in full speed and fashion was to quickly built a set of projects including to launch several popular and interesting initiatives such as for instance Law Enforcement and OSINT operation called “Uncle George”

where the ultimate goal was to collect as much publicly accessible information on the bad guys then data mine and present my findings to the wider security industry and community including to look for and present tons of actionable intelligence on the bad guys which could have been useful in the context of having vendors and organizations attempt to launch cyber attack and cyber campaign attribution efforts against these individuals.

At some specific point in time I came across the local for Bulgaria Cyber Security Talks event where I applied to make a presentation which got accepted which led me to eventually pop up at the event in front of eighty people and make a high-quality personal presentation on cybercrime research OSINT and threat intelligence including my general experience in the field as an expert in the field of cybercrime research OSINT and threat intelligence gathering where I’m an independent contractor since practically December, 2005.

OSINT is Power

It used to be a moment when I originally started getting involved in OSINT (Open Source Intelligence) as an independent contractor when I originally came across to the following document which greatly inspired me to join this space - “Reexamining the Distinction Between

Open Information and Secrets” while browsing through Globalsecurity.org Fas.org Cryptome.org at that time. The primary reason why OSINT inspired me to become an independent contractor in this space in specific information security is the fact that a lot of the documents that I had to go through to learn what OSINT is and how to do it were either classified or publicly accessible however coming from important sources of information such as for instance the CIA.gov including various other U.S Government and U.S Intelligence Community sources of information.

It is my opinion that the power of OSINT primary relies on the actual collection and working with the actual decision-making information using public sources which also includes actual enrichment and colleration between multiple sources of publicly accessible classified and declassified information which makes this area quite interesting to join from an independent contractor perspective in the information security field.

What I truly happened to realize when I originally read the original document back in the 90’s is that OSINT in terms of fighting cybercrime should be conducted in as fast as possible way fashion including when taking into consideration the higher goal which in my personal case was and is and continues to be the fight against cybercriminals and cyber threat actors.

Throughout the years I’ve also managed to realize the potential of something that I describe as historical OSINT and historical use of information to connect the dots including the use of historical OSINT assets inventory build up in the form of building historical OSINT databases in the context of for instance full copies of public cybercrime-friendly forum communities for trends and situational awareness improving and spotting including the use of historical OSINT





artifacts which on the majority of occasions proved an invaluable resource in my historical and current OSINT research and investigations into the bad guy’s infrastructure and what they were truly up to and are up to present day in terms of cybercrime-friendly forum market propositions and actual cybercrime trends globally and internationally.

OSINT is great when you have access to information and this is where I’ve always looked into Google as a primary source of information which I later on began processing collecting and enriching which led me to a pretty interesting Law Enforcement and OSINT project where my primary goal was to collect as many public cybercrime-friendly forum communities and distribute them to the appropriate parties where the ultimate goal would be to data mine and process and enrich this information potentially leading to a personally identifiable set of information which basically resulted in a decades of actionable intelligence information to be processed and worked on in personal and commercial ventures where the ultimate goal was and will always be to track down and monitor and make impact within the cybercrime ecosystem in the context of disrupting and exposing cybercriminal activity globally and internationally.

Sample OSINT research that I conducted during 2022:

Personally Identifiable Information: Omid Ghaffarinia is a primary member of Iranian-based ITSec Team sought by and prosecuted by U.S Law Enforcement and is also known to be a member of Ashiyane Digital Security Team and is using the Plus handle and is also known to be using the following email addressess - omid.ghaffarinia@gmail.com; plus.ashiyane@gmail.com;

omid.ghaffarinia@alum.sharif.edu and has a personal phone - 091 2444 9002 and is using the following Personal Page - http://omidplus.persiangig.com/ including the following Google+

account - https://plus.google.com/109226633947780718251

Sample Omid Ghaffarinia Personal Documents:

Maltego Power

Do you know which is the coolest cybercrime research and threat intelligence visualization tool around that’s also available as a community version but also includes powerful and easy to use features in its commercial version and is made available online exclusively for researchers? That would be Maltego which I remember actually using back in 2008 even before it was cool to visualize some of my research activities using open source intelligence (OSINT) tool and techniques at the time. The results? An endless mine of visualization capabilities for your own research which would be later on easily converted into possible commercial ventures and publicly accessible high-quality and never-published before type of cybercrime and threat intelligence research.

My OpenCTI Instance

Running a OpenCTI instance was quite an achievement at some point. The very idea that supplying machine readable threat intelligence on current and emerging campaigns could be





possible as a one man operation was quite exciting and I couldn’t wait to get my hands on an OpenCTI instance which I set up on my own and which I began populating with actionable intelligence on the bad guys on a daily basis. My primary idea here was to build a small database of loyal clients who might be interested in my research and daily supply of actionable intelligence and where I could charge a flat monthly fee for my research and just do my research and do this as a way to pay the bills.

Processing over a dozen of currently active and live malware samples on a daily basis for research purposes was quite an achievement and basically a daily routine which I eventually excelled at to the point of supply daily actionable intelligence to a small set of clients who were interested in protecting their networks and organizations using my research.

Looking beyond what a usual researcher would do here I eventually ended up also adding actionable and qualitative and descriptive analysis and additional context for every campaign that I was profiling and processing at the time which led me to some pretty successful analysis ready for publication and consumption in terms of protecting an organization’s infrastructure based on my experience and methodology in the field.

Presenting Astalavista.box.sk

Surprise, suprise. Guess what? I finally did it. Having been actively working on the infamous https://astalavista.com throughout 2003-2006 as a Managing Director responsible for all the content I’ve finally managed to land a permanent project on the original https://astalavista.box.sk project throughout the period 2020-2022 where I launched an official security.

Working for WhoisXML API

It’s a pleasant day and I’m once again looking for a permanent job position while working in between several part-time OSINT research projects when I’m “finally” approached by a colleague from WhoisXML API who’s directly interested in exploring a possible working relationship with me for the position of DNS Threat Researcher which I immediately undertook and this has been and still is my primary and official work place throughout the past two and a half years where I’ve been busy crunching out and producing high quality and never published or released before white papers on various interesting and novel and informative topics where I’ve managed to produce approximately 83 white papers on these topics throughout the past two and a half years with great success and a lot of personal success comments from a professional environment where I’m busy researching the bad guy’s infrastructure using one of the Web’s primary WHOIS and historical WHOIS records lookup databases in the world where I’m product to work and continue working up to present day.

What does a typical day at the company where I work using one of my key qualities which is remote work look like? It’s basically sticking to my usual situational awareness improving and maintaining in the field methodology which I’ve been using and applying throughout the years and then migrating the actionable intelligence that I’ve either produced on my own or obtained





using public sources and enriched in the report of a finished intelligence product into a user and client friendly white paper which will eventually get published on the Web site of the company -

https://whoisxmlapi.com.

Throughout the period of time that I worked with the company a colleague also introduced me to an organization that I knew for years and greatly admired due to its intersection with technical research and LE (Law Enforcement) where basically users and people who knew a lot on the topic could communicate their findings in a a research based form to the National Child Protection Task Force (NCPTF) where I originally requested to participate and offered my expertise in the field and actually participated in a project with great results where me and my colleague including the company got a big “thank you” on Twitter and LinkedIn which was great news as my primary area of expertise lies in the fact that I produce managed and obtain real-time or historical actionable or cyber threat actor threat intelligence which I later on communicate to as many people as possible and actually always do my best to reach out to the affected parties in the context of communicating my findings to LE (Law Enforcement) by either publishing my research and findings on my personal blog or by approaching them using other means where necessary.

Among my key accomplishments within the company was my interest in developing a proprietary Law Enforcement feed with novel and interesting for Law Enforcement only articles of interest on key topics such as for instance cyber threat actors including malicious software and actual malicious and fraudulent infrastructure mapped and exposed in a specific fashion using my own methodology in the usual way.

At a specific point in time I must have gathered a proper momentum among my readers which I never really knew anything about including the bad guys in the context of intercepting a chatter mentioning me in a pretty bad context despite the fact that this is untrue as most of my research and the research that I did was in a passive mode namely I never really engaged anyone in specific friends and colleagues from the industry including the bad guys as I’m a firm believer that you can collect all the information that you need on them without bothering to interact or approach them.

Among the few key comments that I’ve ever came across to referencing me in my entire career on a major cybercrime-friendly forum community was a Darkode discussion including a hitman request for me which apparently managed to find me one way or another including a second discussion which basically referenced my name and insisted that the same thing that took place with me back in 2011 will happen again.

What really took place back in 2011 in my apartment in Sofia where I relocated on my own and where I insisted to live on my own and do my research using my ZDNet salary as a primary means to pay for my rent and living expenses is

Bonus Content - Cybercrime-Friendly Forum

Communities

Some of the active forums at the time included:



https://umaxforum.com



https://secnull.cc



https://vendors.pro



https://lampeduza.net



https://srvc.iframeservice.net



https://infraud.cc



https://gofuckbiz.com



https://zae-biz.com



https://forum.antichat.ru



https://exploit.in



https://r00tsecurity.org



https://fuckav.ru



https://rescator.me



https://vand.cc



https://omerta.cc



https://myfakeid.biz



https://fluxcard.com



https://noveltyidshop.com



https://idchief.ph



https://noveltyid.com.au



https://newidcards.com



https://noveltyidcardstoronto.com



https://noveltyidfactory.com



https://lostids.com



https://foro.elhacker.net



https://indetectables.net



https://hackxcrack.es



https://level-23.biz



https://underground.org.mx



https://fusionhack.es



https://foro.udtools.net



https://portalhacker.net



https://masters-hackers.info



https://dekoders.net



https://stopxaker.ru



https://crackingforum.in



https://crackhackforum.com



https://youxakep.ru



https://forum.xaknet.org



https://hashcracking.ru



https://angry-hack.ru



https://n2c-team.ws



https://hot-hack.ru



https://prologic.su



https://forum.xakepok.net



https://forum.xakepinter.net



https://truehackers.ru



https://xackportal.0pk.ru



https://forum.inattack.ru



https://hakepok.ru



https://vendors.su



https://xeksec.com



https://shopworld.biz



https://brutezone.ru



https://carderstrade.ws



https://webcriminal.ru



https://cvv-club.cc



https://darkmoney.cc



https://forum.k0d.cc



https://gssf.biz



https://forum.tophope.ru



https://forum.uinsell.net



https://grabberz.com



https://Mazafaka.cc



https://kriminala.net



https://crutop.nu



https://kidal.org



https://cardersplanet.biz



https://rfhlths.ws



https://carding-world.su



https://Planeta.ms



https://c-ali.ru



https://swiz.in



https://hacklife.ws



https://carding-pro.com



https://CardRoot.biz



https://cardnews.biz



https://carderlife.ms



https://go2real.biz



https://hacklife.us



https://youxakep.ru



https://karder.biz



https://carding-vip.ru



https://pandora.ms



https://x-carding.com



https://closedmazes.ms



https://blackwire.su



https://city-carding.ru



https://carding-lux.ru



https://global-carding.biz



https://best-carder.com



https://c-seller.su



https://Exploit.IN



https://DaMaGeLaB



https://CardersTrade.ws



https://Carder.Pro



https://Vendors.Pro



https://GraBBerZ.CoM



https://UinSell.net



https://TGBR Community



https://XaKePoK.Su



https://Brutezone.ru







https://Biglan.ru



https://Omerta.cc



https://XakepInter.Net



https://isahackers.com



https://carderprofit.cc



https://damagelab.org



https://zion-network.net



https://opensc.ws



https://thedragon.biz



https://xakepy.cc



https://forum.zloy.bz



https://forum.kriminala.net



https://webkill.3bb.ru



https://carderstrade.biz



https://proxy-base.org



https://spy-team.biz



https://xek.name



https://forum.prologic.su



https://xakeroff.net



https://4sell.su



https://hacklife.us



https://forum.xeksec.com



https://xaker.name



https://forum.k0d.biz



https://forum.xaknet.ru



https://forum.iseekyou.im



https://buynet.in



https://xakeps.ru



https://forum.kidal.org

Bonus Content - Complimentary Russian

Business Network Analysis

Inside the 2007-2009 Series of Cyber Attacks Against Multiple International Embassies - $200

What will you find in this report:

- RBN Connection, New Media Malware Gang connection - “ai siktir” “Die()“, money mule recruitment, money laundering of virtual currency

- 10 pages of insightful, detailed and far-sighted commentary discussing all angles of the attacks in the context of today’s modern cyber espionage arms race

- God’s Eye View of the attacks, through a detailed Mind Map visualizing the activities of the cybercriminals behind the attacks

- Actionable CYBERINT data to assist law enforcement, academics and the private sector in ongoing or past cybercrime investigations

- Complete WHOIS records beyond the WHOIS Privacy settings on the domains used in each of the campaigns

- Complete domain portfolios registered up to the present day using the same emails used to register the malicious domains during 2007-2009 to assist law enforcement, academics and the private sector in catching up with their malicious activities over the years

- Detailed analysis of each and every campaign’s domain portfolios (up to present day) further dissecting the fraudulent schemes launched by the same cybercriminals that embedded malware on the embassies’ web sites

- Complete IP Hosting History for each and every of the malicious domains/command and control servers during the time of the attack

- The “Big Picture” detailing the inter-connections between the campaigns, with historical OSINT data pointing to the “New Media Malware Gang”, back then customers of the Russian Business Network

http://ddanchev.blogspot.nl/2007/09/syrian-embassy-in-london-serving.html

- sicil.info - http://support.clean-mx.de/clean-

mx/viruses.php?ip=220.194.44.67&sort=first%20desc

- https://www.csis.dk/da/csis/blog/646/646/ - srvs4you@gmail.com

- 0ki.ru

- x12345.org

- MD5: ef98a662c72e3227d5c4bb3465133040

- miron555.org

sicil.info - on 2007-09-26 during the time of the attack, the domain was registered using the srvs4you@gmail.com email. The domain name first appeared online on 2006-06-10 with an IP

213.186.33.24. On 2007-07-11, it changed IPs to 203.121.79.71, followed by another change on 2008-01-06 to 202.75.38.150, another change on 2008-05-06 to 203.186.128.154, yet another change on 2008-05-18 to 190.183.63.103, and yet another change on 2008-07-27 to 190.183.63.56.

Over the years (up to present day) srvs4you@gmail.com is also known to have been used to register the following domains:

10LANN10.ORG

24CARGO.NET

ACE-ASSIST.BIZ

ACTIVATION-CONFIRM.COM

ADWOORDS.NET

ALERT-CAREERBUILDER.COM

ANNEBEHNERT.INFO

APOLLO-SERVICES.NET

APPOLAGE.ORG

AUCTIONS-UKASH.COM

BBCFINANCENEWS.COM

BESTGREATOFFERS.ORG

BLACKBIRD-REGISTRATION.COM

BLOOMBORG.BIZ

BUSINESSPROC1.COM

BUSSOLUTIONSINC.ORG

CALISTO-TRADING.COM

CALISTO-TRADING.NET

CALISTO-TRADING.ORG

CANDY-COUNTRY.COM

CASHEQ.COM

CFCA-USA.COM

CFODAILY.BIZ

CITIZENFINANCIAL.NET

CITYLENDING.NET

CLEAN2MAIL.COM

CONFIRM-ACTIVATION.COM

CONSULTINGWIZ.ORG

COURIERUSA-ONLINE.COM

CRISTHMASX.COM

D-STANLEY.NET

DARIAZACHERL.INFO

DES-GROUP.COM

DIGITAL-INVESTMENT-PROJECTS.COM

DNS4YOUR.NET

DVASUKA.COM

EASY-MIDNIGHT.COM

EASY-TRANSFER.BIZ

EASYMIDNIGHT.COM

ECAREERSTYLE.COM

ECNOHO.COM

EFINANCIALNEWS.BIZ

ELUXURYAUCTIONS.COM

ELX-LTD.NET

ELX-TRADING.ORG

ELXLTD.NET

EMONEY-EX.COM

EPSINCORP.NET

EQUITRUST.ORG

EROBERSTENG.COM

ERXLOGISTICS.COM

ESDEALS.COM

ESTEMANIAKS.COM

EU-BIS.COM

EU-CELLULAR.COM

EUBIZ.ORG

EUWORK.ORG

EXPRESSDEAL.INFO

EZADO.NET

FAIRWAYLENDING.ORG

FAN-GAMING.ORG

FCINTERNATONAL1.COM

FIDELITYLENDING.NET

FINANCIAL-FORBES.COM

FINANCIALNEWS-US.NET

FIRSTCAPITALGROUP.ORG

FREEMYDNS.ORG

FREMONTLENDING.NET

FRESH-SOLUTIONS-MAIL.COM

FRESH-SOLUTIONS.US

GARNANTFOUNDATION.COM

GAZENVAGEN.COM

GLOBERENTAL.COM

GOOGMAIL.BIZ

I-EXPERTADVISOR.COM

ICEBART.COM

ICQDOSUG.COM

IESECURITYUPDATES.COM

INDIGO-CONSULTING.ORG

INDIGO-JOB-WITH-US.COM

INDIGOJOB.COM

INDIGOVACANCIES.COM

INNCOMING.COM

IVSENTNS.COM

IWIWLIVE.NET

IWIWONLINE.NET

JOBS-IN-EU.ORG

KELERMAKET.COM

KKLFNEWS.COM

KNSES.COM

KOMODOK.COM

KRDNS.BIZ

KSFCNEWS.COM

KSFCRADIO.COM

KTES314.ORG

LDA-IMPORT.COM

LEGAL-SOLUTIONS.ORG

LGCAREER.COM

LGTCAREER.COM

LIBRARYSP.COM

LITTLEXZ.COM

MARIAWEBBER.ORG

MEGAMULE.NET

MONEYCNN.BIZ

NJNK.NET

NS4UR.NET

NYTIMESNEWS.BIZ

O2CASH.NET

OFFSOFTSOLUTIONS.COM

PCPRO-TBSTUMM.COM

PERFECT-INVESTMENTS.ORG

PROGOLD-INC.BIZ

PROTECTEDSESSION.COM

RAZSUKA.COM

REUTORS.BIZ

RUSHOP.US

SCIENCE-AND-TRADE.COM

SECURE-OPERATIONS.ORG

SECURESITINNGS.COM

SERVICESSUPPORT.BIZ

SESSIONPROTECTED.COM

SICIL.INFO

SICIL256.INFO

SIMPLE-INVESTMENTS-MAIL.ORG

SIMPLE-INVESTMENTS.NET

SIMPLE-INVESTMENTS.ORG

SP3LIBRARY.COM

SPEEDUSERHOST.COM

STOREMPIRE.COM

TAS-CORPORATION.COM

TAS-CORPORATION.NET

TASCORPORATION.NET

TOPIXUS.NET

TSRCORP.NET

U-FILE.ORG

UKASHAUCTION.NET

ULTRAGAME.ORG

UNITEDFINANCEGROUP.ORG

VANESSAKOEPP.ORG

VERYMONKEY.COM

VESA-GROUP.COM

VESA-GROUP.NET

VIPVIPNS.NET

VIPVIPNS.ORG

WONDOOWERIA.COM

WONDOOWERKA.COM

WOOTPWNSEAL.COM

WORLDECONOMIST.BIZ

WUMTT-WESTERNUNION.COM

XSOFTWARES.COM

XXX2008XXX.COM

YOURCASHLIVE.COM

YOURLIVE.BIZ

YOURMULE.COM

On 2008-09-25 0ki.ru was registered using the kseninkopetr@nm.ru email. The same email address is not known to have been used to register any additional domains.

On 2008-06-19 x12345.org was registered using the xix.x12345@yahoo.com email. On 2007-09-10 the domain use to respond to 66.36.243.97, then on 2007-11-13 it changed IPs to 58.65.236.10, following another change on 2008-05-06 to 203.186.128.154. No other domains are known to have been registered using the same email address.

On 2007-06-07, miron555.org was registered using the mironbot@gmail.com email, followed by another registration email change on 2008-02-12 to nepishite555suda@gmail.com. On 2007-04-24, the domain responded to 75.126.4.163. It then changed IPs on 2007-05-09 to 203.121.71.165, followed by another change on 2007-06-08 to 58.65.239.247, yet another change on 2007-07-15

to 58.65.239.10, another change on 2007-08-19 to 58.65.239.66, more IP changes on 2007-09-03

to 217.170.77.210, and yet another change on 2007-09-18 to 88.255.90.138.

Historically (up to present day), mironbot@gmail.com is also known to have been used to register the following domains:

24-7ONLINEPHARMACY.NET

BESTMOVIESONLINE.INFO

BRIGHTSTONEPHARMA.COM

DEAPOTHEKE.COM

DOZOR555.INFO

MY-TRAFF.CN

PHARMACYIT.NET

TRFFC.ORG

TRFFC3.RU

XMPHARM.COM

http://ddanchev.blogspot.nl/2008/01/dutch-embassy-in-moscow-serving-malware.html

- lmifsp.com

On 2009-03-04, lmifsp.com was registered using the redemption@snapnames.com email. On 2007-11-30, it used to respond to 68.178.194.64, then on 2008-12-01 it changed IPs to 68.178.232.99.

http://ddanchev.blogspot.nl/2008/11/embassy-of-brazil-in-india-compromised.html

- traff.asia

- google-analyze.com

- google-analystic.net

- beshragos.com

On 2008-10-15, traff.asia was registered using the traffon@gmail.com email.

On 2008-06-19, google-analyze.com was registered using the incremental@list.ru email. On 2007-12-21 it responded to 66.36.241.153, then it changed IPs on 2007-12-22 to 66.36.231.94, followed by another change on 2008-02-03 to 79.135.166.74, then to 195.5.116.251 on 2008-03-

16, to 70.84.133.34 on 2008-07-31, followed by yet another change to 216.195.59.77 on 2008-09-15.

On 2008-08-05, google-analystic.net was registered using the abusecentre@gmail.com email. On 2008-04-11 it used to respond to 64.28.187.84, it then changed IPS to 85.255.120.195 on 2008-08-03, followed by another change on 2008-08-10 to 85.255.120.194, then to 85.255.120.197 on 2008-09-07, to 69.50.161.117 on 2008-09-14, then to 66.98.145.18 on 2008-10-11, followed by another change on 2008-10-25 to 209.160.67.56.

On 2008-11-11, beshragos.com was registered using the migejosh@yahoo.com email. On 200811-11 it used to respond to 79.135.187.38.

http://ddanchev.blogspot.nl/2009/03/ethiopian-embassy-in-washington-dc.html

- 1tvv.com

- trafficinc.ru

- trafficmonsterinc.ru

- us18.ru

On 2009-01-19, 1tvv.com was registered using the mogensen@fontdrift.com email. On 2005-08-27, the domain responded to 198.65.115.93, then on 2006-05-12 to 204.13.161.31, with yet another IP change on 2010-04-08 to 216.240.187.145, followed by yet another change on 2010-06-02 to 69.43.160.145, then on 2010-07-25 to 69.43.160.145.

On 2010-01-04, trafficinc.ru was registered using the auction@r01.ru email.

On 2009-03-01, trafficmonsterinc.ru was registered using the trafficmonsterinc.ru@r01-service.ru email.

On 2009-05-02, us18.ru was registered using the belyaev_andrey@inbox.ru email.

http://ddanchev.blogspot.nl/2009/01/embassy-of-india-in-spain-serving.html

- msn-analytics.net

- pinoc.org

- wsxhost.net

On 2008-09-07, msn-analytics.net was registered using the palfreycrossvw@gmail.com email.

On 2007-06-17 it used to respond to 82.98.235.50, it then changed IPs on 2008-09-07 to 58.65.234.9, followed by another change on 2009-11-14 to 96.9.183.149, then to 96.9.158.41 on 2009-12-29, and to 85.249.229.195 on 2010-03-09.

On 2008-07-10, pinoc.org was registered using the 4ykakabra@gmail.com email. On 2008-07-10 it responded to 58.65.234.9, it then changed IPs on 2008-08-17 to 91.203.92.13, followed by another change on 2008-08-24 to 58.65.234.9, followed by yet another change to 208.73.210.76

on 2009-10-03, and yet another change on 2009-10-06 to 96.9.186.245.

On 2008-09-20, wsxhost.net was registered using the palfreycrossvw@gmail.com email. On 2008-09-20 wsxhost.net responded to 58.65.234.9, it then changed IPs on 2008-12-22 to 202.73.57.6, followed by another change on 2009-05-18 to 202.73.57.11, yet another change on 2009-06-22 to 92.38.0.66, then to 91.212.198.116 on 2009-07-06, yet another change on 2009-08-17 to 210.51.187.45, then to 210.51.166.239 on 2009-08-25, and finally to 213.163.89.54 on 2009-09-05.

On 2008-06-29 google-analyze.cn was registered using the johnvernet@gmail.com email.

Historically (up to present day) johnvernet@gmail.com is known to have registered the following domains:

BAIDUSTATZ.COM

EDCOMPARISON.COM

GOOGLE-ANALYZE.ORG

GOOGLE-STAT.COM

KOLKOMAN.COM

M-ANALYTICS.NET

PINALBAL.COM

PORNOKMAN.COM

ROBOKASA.COM

RX-WHITE.COM

SIG4FORUM.COM

THEKAPITA.COM

VISITTDS.COM

On 2008-08-27, yahoo-analytics.net was registered using the fuadrenalray@gmail.com email.

yahoo-analytics.net

google-analyze.org

qwehost.com

zxchost.com

odile-marco.com

edcomparison.com

fuadrenal.com

rx-white.com

http://ddanchev.blogspot.nl/2009/03/embassy-of-portugal-in-india-serving.html

- betstarwager.cn

- ntkrnlpa.cn

- ntkrnlpa.info

http://ddanchev.blogspot.nl/2007/12/have-your-malware-in-timely-fashion.html

- tarog.us

- fernando123.ws

- winhex.org

- kjlksjwflk.com

- New Media Malware Gang

http://ddanchev.blogspot.nl/2009/03/azerbaijanian-embassies-in-pakistan-and.html

- filmlifemusicsite.cn

- promixgroup.cn

- betstarwager.cn

- clickcouner.cn

denverfilmdigitalmedia.cn





litetopfindworld.cn

nanotopfind.cn

filmlifemusicsite.cn

litetoplocatesite.cn

litedownloadseek.cn

yourliteseek.cn

diettopseek.cn

bestlotron.cn

http://www.zdnet.com/blog/security/usaid-gov-compromised-malware-and-exploits-served/2817

- should-be.cn

- orderasia.cn

- orderasia.cn

- fileuploader.cn

http://ddanchev.blogspot.nl/2007/09/us-consulate-st-petersburg-serving.html

- verymonkey.com

Visitors of the site:

- potential money mules thanks to email harvesting

- intercepting personal data to commit identity theft

- hope to infect high-profile Consulate/Embassy staff members and gain access to the Consulate/Embassy’s network

Bonus Content - Complimentary Stolen

Credit Card Shops Analysis

https://privateshop.me

https://privateshop.ws

https://try2swipe.biz

https://hotdumps.org

https://vm-center.org

https://topdumps.tv

https://topdumps.pro

https://www.fedumps.com

https://fe-dumpstore.su

https://fe-dumpstore.su

https://feshop.su

https://fe-ccshop.com

https://fe-store.net

https://fe-store.org

https://fedumps.org

https://fedumps.net

https://fedumps.com

https://feshop.su

https://fe-ccshop.com

https://ferummmmshop.su

https://ferumstorecards.su

https://feshop-forever.su

https://ferum-shop.ru

https://ferum-shop.org

https://fedumpssss.org

https://festore-dumps.ru

https://fershop-forever.su

https://fershop-corp.su

https://feshop-store.su

https://fershop-forever.ru

https://feshop-card.ru

https://feshop-forever.ru

https://fershop-forever.com

https://feshop-corp.com

https://fshop-corp.com

https://fershop-forever.org

https://gangdumps.pro

https:/getdumps.org

https://dumpsshop.ru

https://gegov.biz

https://vmadumpcs.cc

https://logoshopcc.org

https://logoshopcc.biz

https://logoshopcc.ru

https://feteam-ccshop.pm

https://fershop-forever.su

https://fershop-corp.su

https://feshop-store.su

https://fershop-forever.ru

https://feshop-card.ru

https://secretshop.cc

https://zukkoshop.cc

https://feteam-ccshop.pm

https://uniccservice.su

https://secretshop.cc

https://getdumps.org

https://vm-center.org

https://swiped.su

https://feteam-ccshop.pm

https://inone.su

https://entershop.biz

https://vmadumps.cc

https://www.ccpos.su

https://getdumps.org

https://www.topdumps.tv

https://freshshop.bz

https://freshcc.su

https://freshdumps.su

https://freshcc.su

https://cardshop.tv

https://pawn-shop.cc

https://inone.su

https://backstab.biz

https://logoshopcc.biz

https://ccbases.com

https://ccstore.su

https://www.ccguru.su

https://kstuff.biz

https://t12shop.cc

https://dumps.cc

https://www.topdumps.tv

https://getdumps.org

https://www.morebonus.com

https://www.fedumps.com

https://niii.in

https://track2.cc

https://cardplanet.cc

https://www.ccpos.su

https://uniccservice.su

https://uniccshop.com

https://uniccservice.su

https://www.uniccservice.su

https://unicc.su





https://www.fe-ccshop.com

https://www.feshop.su

https://www.fe-dumpstore.su

https://fe-ccshop.com

https://fe-store.net

https://fe-store.org

https://fedumps.org

https://fedumps.net

https://fedumps.com

https://fe-ccshop.com

https://fe-store.net

https://fe-store.org

https://fedumps.org

https://fedumps.net

https://fedumps.com

https://gbs.name

https://ccworld.biz

https://getsome.cc

https://backstab.biz

Bonus Content - Is the Carding Underground

OPSEC Aware?

accessltd.ru - Email: admin@accessltd.ru - ACTIVE

track2.name - Email: rubensamvelich@gmail.com; rubensamvelich@yahoo.com - ACTIVE





bulba.cc - Email: bulbacc@rocketmail.com; bulbacc@yahoo.com - ACTIVE

ccStore.ru - Email: ooo.service@yahoo.com - ACTIVE

dumps.cc - Email: dumps.cc@safe-mail.net - ACTIVE

ccmall.cc - Email: b2b.maxim@gmail.com; lvjiecong@yahoo.com.cn

trackstore.su - Email: roger.sroy@yahoo.com

magic-numbers.cc - Email: elche011@yahoo.com

allfresh.us - Email: keikomiyahara@yahoo.com; dcb725@gmail.com

freshstock.biz - Email: wattt80@yahoo.com

approven.su - Email: yurtan20@e1.ru

cv2shop.com - Email: vipforexbiz@gmail.com

vzone.tc - Email: Whois Privacy Activated

privateservices.ws - Whois Privacy Activated

trackservices.ws - Whois Privacy Activated

perfect-numbers.cc - Email: kachanaburi@yahoo.com

mega4u.biz - Email: persiks@online.ua

pwnshop.cc - Email: alexandanns@gmail.com

bestdumps.su - Email: bestdumpssu@live.com

mycc.su - Email: admin@mycc.su

bestdumps.biz - Email: admin@bestdumps.biz

dumpshop.bz - Email: tonchang2011@yahoo.com

cardshop.bz - Email: tonchang2011@yahoo.com

Bonus Content - The Underground Market

for Stolen Credit Cards

Exposing the Market for Stolen Credit Cards Data

What’s the average price for a stolen credit card? How are prices shaped within the cybercrime ecosystem? Can we talk about price discrimination within the underground marketplace? Just how easy is to purchase stolen credit cards known as dumps or full dumps, nowadays?

In this intelligence brief, I will expose the market for stolen credit cards data, by profiling 20

gateways for processing of fraudulently obtained financial data.

Key summary points:

- Tens of thousands of stolen credit cards a.k.a. dumps and full dumps offered for sale in a DIY

market fashion

- The majority of the carding sites are hosted in the Ukraine and the Netherlands

- Liberty Reserve is the payment option of choice for the majority of the portals

- Four domains are using Yahoo accounts and one using Live.com account for domain registration

- Four of the domains are using identical name servers

- Each DIY gateway for processing of fraudulently obtained financial data has a built-in credit cards checker or offers links to external sites performing the service

- Several of the fraudulent gateways offered proxies-as-a-service, allowing cybercriminals to hide their real IPs by using the malware infected hosts as stepping stones Gateways for Processing of Fraudulently Obtained Financial Data:

https://validzone.org

https://mymarket.ws

https://ccshop.bz

https://mkdumps.com

https://brandcc.name

https://vzone.bz

Responding IPS, registered emails, name servers, ASs, associated ICQ numbers, geolocation of the hosting IP is as follows:

ccmall.cc - 213.5.70.34 - Name server: TR1.ONLINESHOP.SU - Email: gwylhcfktm@whoisservices.cn - AS49544, INTERACTIVE3D-AS - HOSTED IN THE

NETHERLANDS

track2.name - 91.213.175.121 - AS6849, UKRTELNET JSC UKRTELECOM - HOSTED IN

UKRAINE

trackstore.su - 46.21.148.26 - Email: roger.sroy@yahoo.com - AS35017, SWIFTWAY-AS -

HOSTED IN THE NETHERLANDS

magic-numbers.cc - 91.213.175.89; 91.223.77.35 Name server: NS1.1000DNS.NET - Email: contact@privacyprotect.org - AS6849, UKRTELNET JSC UKRTELECOM - HOSTED IN

UKRAINE

allfresh.us - 46.21.144.115 - Name server: YNS1.YAHOO.COM - Email:

keikomiyahara@yahoo.com - AS35017, SWIFTWAY-AS - HOSTED IN THE

NETHERLANDS

freshstock.biz - 38.97.225.166; 69.175.73.184 - Name server - NS1.PIPEDNS.COM Email: ghmbfvntxs@whoisprivacyprotect.com - AS32475, SINGLEHOP , Inc. - HOSTED IN THE

UNITED STATES

bulba.cc - 91.223.77.254 - Name server: NS1.NAMESELF.COM - Email: bulbacc@yahoo.com -

AS6849, UKRTELNET JSC UKRTELECOM - HOSTED IN UKRAINE

approven.su - 91.229.248.20 - Name server: dns1.naunet.ru - Email: yurtan20@e1.ru - HOSTED

IN UKRAINE

cv2shop.com - 72.20.12.205 - Name server: DNS1.NAME-SERVICES.COM - Email: wnfxgjdg@whoisprivacyprotect.com - AS25761, STAMINUS-COMM - HOSTED IN THE

UNITED STATES

vzone.tc - 49.212.25.242 - Name server: dns1.yandex.ru - Email: adamsnames@rrpproxy.net -

AS9371, SAKURA-C SAKURA Internet - HOSTED IN JAPAN

ccStore.ru - 91.220.101.200 - Name server: ns1.1000dns.net - Email: ccstoreru@yahoo.com -

AS49704 - HOSTED IN THE NETHERLANDS

dumps.cc - 124.217.247.59 - Name server: NS1.IPSTATES.NET - Email:

dumps.cc@domainsproxy.net - AS45839, PIRADIUS-AS PIRADIUS NET - HOSTED IN

MALAYSIA

privateservices.ws - 217.23.9.92 - Name server: ns1.servicedns.nl - AS49981, WorldStream AS

Maasdijk - HOSTED IN THE NETHERLANDS





perfect-numbers.cc - 91.220.101.75 - Name server: NS1.1000DNS.NET - AS49704, ADDOS-AS FOP Litvinenko Sergey Nikolaevich; icq: 605099359 - HOSTED IN THE NETHERLANDS

mega4u.biz - 178.162.174.71 - Name server: NS1.FREEDNS.WS - Email: persiks@online.ua -

AS28753, LEASEWEB-DE - HOSTED IN GERMANY

accessltd.ru - 91.213.175.167 - Name server: ns14.zoneedit.com - Email - admin@accessltd.ru -

AS6849, UKRTELNET JSC UKRTELECOM, 18, Shevchenko blvd. Kiev, Ukraine - HOSTED

IN UKRAINE

pwnshop.cc - 77.79.13.209 - Name server: NS1.AFRAID.ORG - AS16125, DC-AS UAB -

HOSTED IN LITHUANIA

bestdumps.su - 91.213.175.57 - Name server: ns1.1000dns.net - Email: bestdumpssu@live.com ICQ : 619429330 - AS6849, UKRTELNET JSC UKRTELECOM - HOSTED IN UKRAINE

mycc.su - 188.93.17.180 - Name server: ns1.deltahost.com.ua - Email: admin@mycc.su -

AS49505, SELECTEL Ltd. - HOSTED IN RUSSIA

bestdumps.biz - 195.3.145.87 - Name server: NS1.BESTDUMPS.BIZ - Email:

admin@bestdumps.biz - AS50244 - HOSTED IN Latvia, Associated email:

bdsupport@jabber.org, Associated ICQ: 655584

dumpshop.bz - 217.23.9.93 - Name server: ns1.servicedns.nl - Email:

contact@privacyprotect.org; AS49981, WorldStream; HOSTED IN THE NETHERLANDS

cardshop.bz - 217.23.9.67 - Name server: ns1.servicedns.nl - Email: contact@privacyprotect.org; AS49981, WorldStream; HOSTED IN THE NETHERLANDS

dumpscheck.com - 206.217.196.47 - Name server: NS1.DUMPSCHECK.COM - Icq 612303315; AS4436, NLAYER Communications, Inc. - HOSTED IN THE UNITED STATES

Bonus Content - Sample Scheduled Tweets

Circa 2010

- If you believe that you need to become a cybercriminal in order to catch a cybercriminal, you’re an OSINT/CYBERINT amateur.

- Treating the dicease (malware infection) is far more profitable than curing it (jail, securing the massess etc.).

- The day you’re able to gather all this without interacting with the person in question, is the day when you can officially call yourself a pro :)

- Since everyone knows how to contact “them”, why hasn’t anyone done such type of interview?

Bad taste

- Knowing the real phone number, does this mean I should give them a call and record a podcast to raise awareness

- So you’ve got them on your IM, the next time he may interview you on the state of tolarance of his activities around the industry?

- What happens when a security researchers starts suffering from the Stockholm syndrome, by have a favorable stance against cybercrime?

- Cybercriminals, dress yourself and your babies fashionably. #humor

- Short-term centered companies think market share. Long-term centered companies think heart/mind share.

- 33% of computers running antivirus were infected. Similar report related to Zeus crimeware -

- Happy to see ‘Anonymous Group’ keeping track of my previous “Operation Didgeridi”

coverage on their campaign wiki

- Today’s scams rely on Western Union and Money Gram’s services. Weren’t they supposed to require and triple check the identities/transaction clues of their customers?

- I’m so proud of my coverage on Chinese censorship since 2006 - I’m reading, and I’m smiling.

- Anonymous Twitter themed quote of the day - “Twitter’s offline and I cannot even tweet about it”

- The only way to work with someone you don’t like is by realizing the seriousness of the job you’re doing

- Let’s VuuV! This summer, in the annual psy-trance festival in Germany. The organizers known what they’re doing, I mean it.

- You shall obfuscate, I shall deobfuscate.

- I’m proud to release The Scareware/Rogueware Cybercrime Ecosystem Exposed Report 123

(PDF)

- But every decent researcher knows that nobody is “building” botnets anymore. They’re

“generating” them.

- How about start sanctioning ISPs that tolerate their malware-infected customers?

- I know who you got paid to DDoS last summer.

- Connecting a DDoS for hire service with a government-sponsored attack is like connecting a hooker with…well you get the point.

- I’m getting used to reading stories of Romanian phishers going to jail. Let’s see a trend not a fad.

- The black SEO campaign is expanding, guess out of three times who’s behind it? It’s the. come

- What is the Koobface gang up to? Spamming, scareware, blackhat SEO, Google Groups abuse

- -

- No cybercriminal starts from scratch in 2010. It takes a modest $500 investment to purchase 1k infected host

- Added more bandwidth to the Tor bridge relay. Virtually anyone can contribute to the project -

- Even if the C&Cs in #GoogleCN gate were hosted on a (compromised) Chinese government host, that’s not a smoking gun

- Daily dose of OPSEC awareness

- #NowPlaying - Lenny Kravitz - Little girls eyes http://is.gd/ctd7D Truly, madly, deeply. Sync in progress…done, heading to the *privacy* :)

- With or without branding and rebranding of threats, it’s cyber espionage and cybercrime “as usual”.

- If rebranding of cyber espionage is necessary to boost R&D motivation/productivity, that’s an entirely different problem by itself.

- The APT is only an element of something bigger. It’s called “unrestricted warfare” combin.

info/cyberwarfare and beyond.

- Let’s hope that the art of dimplomacy lies in the hands of those who can engineer cyber warfare tensions.

- The beauty of HD streaming over 3G, ah all the pixels, and how about the audience?

Magnificent!+disseminated to all the right parties. #WTF

- Proud to be part of a team which constructively sets people/companies/products straight. Yeah, it’s so @ZDNet I’m talking about.

- Congratulations. I just became the biggest mistake in your life.

- You see what I want you to see, you hear what I want you to hear, you do what I know you would do. Your entire existence is therefore a reflection of my desires.

- Due to the increasing sensitivity

- Judge your hotel by the things you find in the bedroom drawer - :-)

- Tnx for the RTs - @barryirwin

- You killed the kid, now try to enjoy the adult. Who by the way happens to be one fine piece of work! :-)

- You people…you don’t know me… :-)

- Beware the power of the rejected, uneducted, and socially insignificant weitress. #WTF

- The old farts VS Generation I cybercrime fighters warfare, is currently taking place everywhere.

Let the true professionals win!

- The day LE starts chasing down legitimate researchers, is the day when LE officially has no clue where the real criminals are. #BUSYness

- Many are chosen, few a destined.

- How do you fight hypocrisy, envy, and? With professionalism.

- Tnx for the RTs -

- Throughout my modest life experience, I came to the conclusion that bureaucrats exercising pseudo-executive power.

- When you talk and nobody listens, something’s conveniently wrong with everyone’s ears.

#daily #dose #of #wisdom

- I’m sorry but I can’t say I’m sorry for being young, talented, legitimate and single. Why? Cause it feels good!

- Reclaiming dominance over the communication channel in progress…

- Sometimes, 90% of a LE case is solved, by simply asking.

- This Halloween I’m dressing as either Cheech, or Chong. Haven’t decided yet.

http://is.gd/f1kzq #offtopic

- The problem with Google Images from a blackhat SEO perspective is that, there’s no SafeBrowsing warning, and the bad guys already know this.

- The more you like me, the more irrelevant I become. The more you hate me, the important I become.

- The day LE starts chasing down legitimate researchers, is the day when LE officially has no clue where the real criminals are. #BUSYness

- This Halloween I’m dressing as either Cheech, or Chong. Haven’t decided yet.

http://is.gd/f1kzq #offtopic

- Don’t you get it? I’m the whole idea.

- The reason why I possess high value postal stamp collections is fairly simple - you always lose what you don’t respect.

- Fellow researchers…:) researching cybercrime

- (Cyber) Jessus Christ, if you wanted to work with me

- Could you make your existence a little less obtrusive

- This Halloween I’m dressing as either Cheech, or Chong. Haven’t decided yet :) http://is.gd/f4tB0 #offtopic

- I lived to see it - a washing machine technician scholing the cybercrime expert. It will be the other way around the next time.

- Everyone wants a piece of me these days.

- Updated the ZeuS serving 123greetings themed campaing post, summarizing C&Cs+detection rates etc. -

- 3rd 123greetings spamvertising malware campaing for the day, and not a single working URL.

Who’s the zombie now?

- Is it just me, or I’m most productive when I’m most pissed off?

- There’s a special kind of people who patiently wait for research to accumulate, than take credit for acting upon it, excluding the original sources. Sad.

- The true OSINT analyst would expose everything without interacting with the people in question. The rest, would create

- I wonder what kind of responses I’d be getting if I was communicating all the campaigns/groups that I profile on a daily basis.

- You know things have gotten out of hand, when your report WU scammer, and get a respo

- Define hypocricy? Don’t disrupt the cybercrime infrastructure which I originally based on your initial research.

- The reason why I don’t engage in OS security flame wars is simple - there are no insecure OSs, they are insecurely configured OSs.

- Everywhere I go these days, I find myself systematically uninstalling Acrobat Reader, then running Secunia’s PSI. Must be the common sense.

- Random rant: “Pushing the boundaries of the irrelevance”

- Who’s behind Facebook’s FarmTown malvertising campaign? It’s the Koobface gang ->

@Real_Koobface

- Related data on the Koobface gang’s involvement in the NYTimes malvertising attack -

- I often use the term “copycat malware kit”. What do it mean? It means a kit with no unique features, or value-added services. A copycat.

- If everyone reading this tweet was contributing some bandwidth to the Tor project, the service wouldn’t have been so slow after all.

- Although I’m a firm believer in marginal thinking, trying to standardize emerging threats/attack vectors is pretty ambitious.

- Thought of the day: The more they hate you, the more important you are. Then again, life is not a fashion show. So keep walking.

- There’s no such thing as bad publicity, except your own obituary.

- Feed the masses, eat with the classes

- CyTalk violating license agreement

- This is a “with all due respect tweet”. Researchers ruining important threat intell sources for the sake of their pageviews are baaaddd researchers.

- Would you purchase anti-APT appliances, start using a managed APT service, or hire dedicated advanced persistent threat staff? I doubt so.





- Brand it, rebrand it, or co-brand it, the advanced persistent threat is cybercrime as usual, with no significant impact on your daily operations.

- I don’t read Slashdot stories. I read Slashdot comments.

- Having worked/studied with RU and CN folks, for RU I know they don’t like being told what do to. For CN they either like you or they don’t.

- But what’s wrong with the security of our LAN+endpoints, he asked. I seriously cannot name something that’s all right, I replied.

- Everyone’s writing books about cyber warfare these days. That’s the problem.

Bonus Content - Sprott Asset Management
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127.0.0.1 google.co.uk
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127.0.0.1 seek.com.au

127.0.0.1 scam.com

127.0.0.1 scambusters.org

127.0.0.1 www.guardian.co.uk

127.0.0.1 ddanchev.blogspot.com

127.0.0.1 aic.gov.au
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209.171.44.117 www.sprott.com

209.171.44.117 sprott.com

Sprott Asset Management Questions and Answers

Q: Do I have to sign a contract with your company?

Yes, you have to as you will be an official employee of our company.

Q: What do I have to do in order to become your company employee?

We will send you a letter with detailed instructions. You have to do the following steps to become an official employee of our company:

1 - Read the instructions attentively

2 - Register having visited the link specified in the letter

3 - Print out, read, sign and send the contract via e-mail.

4 - Send a copy of one document via e-mail

5 - Wait for a call from our manager

Q: What is my wage per month?

Your wage depends on several factors. It depends for example on the frequency of your daily email check, the frequency of replying our calls, the promptness of our instructions fulfilling and the processing of payments.

During the trial period (1 month), you will be paid 4,600$ per month while working on average 3hours per day, Monday-Friday, plus 8% commission from every payment received and processed.

The salary will be sent in the form of wire transfer directly to your account or you may take it from received funds directly. After the trial period your base pay salary will go up to 6,950$ per month, plus 10% commission.

Q: How often will I get the transfers? What will be the amounts of these transfers?

You will receive from 3 to 7 payments per week depending on our clients activity. The amount of each transfer is from 3000$ up to 9000$.

Consequently you receive 8% from each transaction.

Q: How soon will it takes to start?

You will start In 2-3 days after approval letter. Actually we need to verify your profile in anyway so it usually takes over 2-3 business days.

Q: Why do I need to give you my personal information?

We need to verify your personal profile first, to qualify your professional rate.

Q: Why do you need my banking details?

That’s a good question Sir/Madam. At this time we cannot accept direct payments and orders from our clients and customers. Due to the local and international law the only way we can sell internationally is to open local sales office/branch or use company representatives for these purposes. That is why we are hiring representatives and asking for a bank details information.

You are part of our team and you have full rights.

Q: Is it legal job opportunity? A lot of scam/fraud around internet?

This is absolutely legal opportunity. I can say you more, this is unique job offer from our company and this position is limited. So don’t waste your time, join us, you have nothing to lose.

Q: Do I have to pay you in order to start my work?

No! All you have to do is to fulfill our instructions.

Q: And what about MoneyGram/Western Union transfer charge? Do I have to pay for this charge?

No! The charge is paid from the sum which you have to send us.

Q: And what about taxes?

All tax bills are processed by our company and that is why you do not have to worry about it.

You receive your 8% charge. All the taxes and expenses are paid by our company.

Q: Do I have to provide you with my confidential data? (on-line access to the bank account, passwords, etc)

Our company will never demand your confidential data. You only send to us the details of your bank account for our clients transfers.

Do not tell your passwords anyone and in any case. Be cautious, do not be a phishing target!

Q: What is the address of your company? Do you have an office?

Yes, the company Sprott Asset Management LP. is registered in the Canada Our physical address is: Royal Bank Plaza, South Tower 200 Bay Street Suite 2700, PO Box 27

Toronto, Ontario M5J 2J1 Canada

Q: What is the means of money transfer to your clients?

There are two means of money transfer:

- Western Union

- Money Gram

Q: Where is the nearby office in my city? May I send money via Western Union site?

No you may not as on-line transactions limit is 999$.

You may find a nearby office according to the following links:

MoneyGram: http://www.moneygram.com/eFindUs/findUs.do

Western Union: http://www.westernunion.com/info/agentLocator.asp?country=AU

Here is an example of data which are used for transaction:

Receiver’s Name : XXXX XXXXX

Country: XXXXXXXX

City : XXXXX

Amount to send: $X,XXX.XX

Deduct your profit(8%): $XXX

An address and a bank account number is NOT NECESSARY. We only have to get your Full Name, Country and City in order to get a payment.

Q: You have to render us the following info after the transfer:

- sender’s name;

- receiver’s name;

- MTCN; (money transfer control number)

- total sent amount;

Q: What is the currency for the transfer via Western Union ?

You have to send USD.

Q: When will I know that money are transferred to my bank account?

We will send you information about money transfer to your e-mail. You have to check your email five times per day - in the morning, afternoon and evening.

You will also receive the notification via SMS or by phone (from our manager) If you are very busy and can not check your e-mails frequently, you do not suit us then.

Q: When do I have to send you money when the transfer is sent?

You have to send us money at the same day! Otherwise you will be fined.

Q: If I was busy or was not at home and could not receive the money at the same day then what?

In this case you will be fined. Your penalty will be 29$ per day. If you do not send during 3 days then your bank account will be tied.

Please, be responsible. The promptness of money transfer is the motto of our company!

Q: What shall I do if I get the notification about transfer but there will be no money on my bank account?

Such banking delays are possible. The transfer may not be delayed more than 1-2 days. The delays are also possible because of holidays or week-ends. If the money are not sent during the specified term then note us about it and check the transfer again during the next day.

Q: You have sent me a message about the money transfer, I visited the bank but there was no money on my bank account. What shall I do?

Do not worry. Such cases may happen. Just write to us about it. Probably the money transfer is delayed and it will be sent the next day.

Money Transfer and Acceptance

When you received the letter about the transfer to your bank account you will have to read it attentively. There will be the sum of transfer, the sum of your charge which you have to take (this is your wage) and also the information about the money transfer.

There will be time and date in your letter when you have to visit bank and take the money from your account (Usually it is the next day after the delivery of the letter but there are some exceptions).

You have to go to the bank in the morning (9-11 AM). When the money is received you have to go one of the Western Union/Money Gram offices and send the money to our customer (in most cases the transfers are made to Switzerland, the USA, Germany, Latvia or Poland).

Do not forget to take an identity card in order to send a transfer. You will have to render our manager data which are sent to your e-mail in order to transfer the money at the Western Union office.

The example of data:

Receiver’s Name : XXXXX XXXX

Ñuntry: XXXXXXX

City : XXXXXX

When the transfer is made you have to keep the following data (you will get them during money transfer):

- sender’s name XXXX XXXX

- receiver’s name John Smith

- MTCN; (money transfer control number): 1234567890

- total sent amount $2300

These data must be sent to our e-mail.

“WORKING PROCESS

During all working process you will process incoming and outgoing transfers from our clients.

Main duties are: send payments, receive payments, making records of billing, making simple management duties, checking e-mail daily. You have to provide us your cell phone for urgent calls from your manager. If you don’t have a cell phone you will need to buy it. You must have basic computer skills to operate main process of job duties.

SALARY

During the trial period (1 month), you will be paid 4,600$ per month while working on average 3hours per day, Monday-Friday, plus 8% commission from every payment received and processed. The salary will be sent in the form of wire transfer directly to your account or you may take it from received funds directly. After the trial period your base pay salary will go up to 6,950$ per month, plus 10% commission.

FEES & TRANSFERING PROCEDURE

All fees are covered by the company. The fees for transferring are simply deducted from the payments received. Customer will not contact you during initial stage of the trial period. After three weeks of the trial period you will begin to have contact with the customers via email in regards to collection of the payments. For the first three weeks you will simply receive all of the transferring details, and payments, along with step by step guidance from your supervisor. You will be forwarding the received payments through transferring agents such as Western Union, Money Gram, any P2P agents or by wire transferring.

WESTERN UNION & MONEYGRAM

1. As soon as You receive money transfers from our clients you are supposed to cash it in your bank.

2. You will need to pick up the cash physically at the bank, as well as a transfer to MoneyGram.

3. Please use MoneyGram, located not in your bank, because this providing of anonymosty of our clients.

4. The cashed amounts of money should be transferred to our clients via MoneyGram/Western Union.

according to our transfer instructions except all the fees. The fees are taken from the amount cashed.

5. Not use online service, only physical presence in an office of bank and Western Union.

6. Just after you have transferred money to our clients, please contact your personal manager via e-mail (confirmation of the transfer)

and let him (her) know all the details of your Western Union transfer: SENDER’S NAME, CONTACT DETAILS, ADRESS, AND A REFERENCE NUMBER,

PLEASE BE VERY CAREFUL WHEN YOU RESEND FUNDS, THERE MUST BE NO

MISTAKES, because our client will not be able to withdraw the funds.

7. All procedures have to take 1-2 hours, because we have to provide and verify the safety of our clients` money (we have to inform them about all our actions).

Your manager will support you in any step of application process, if you have any questions you may ask it anytime.”

Do you have any convictions?

TRANSFER SERVICE, Term of the Agreement and Compensation

DUTIES:

The Contractor undertakes the responsibility to receive payments from the Clients of the Company to his personal bank account, withdraw cash and to process payments to the Company’s partners by Western Union or MoneyGram money transfer system within one (1) day. He/she will report directly to the senior manager and to any other party designated by the senior manager in connection with the performance of the duties under this Agreement and shall fulfill any other duties reasonably requested by the Company and agreed to by the Contractor.

CONFIDENTIALITY:

The Contractor acknowledges that during the engagement he will have access to and become acquainted with various trade secrets, inventions, innovations, processes, information, records and specifications owned or licensed by the Company and/or used by the Company in connection with the operation of its business including, without limitation, the Company’s business and product processes, methods, customer lists, accounts and procedures.

The Contractor agrees that he will not disclose any of the aforesaid, directly or indirectly, or use any of them in any manner, either during the term of this Agreement or at any time thereafter.

All files, records, documents, blueprints, specifications, information, letters, notes, media lists, original artwork/creative, notebooks, and similar items relating to the business of the Company, whether prepared by the Contractor or otherwise coming into his possession, shall remain the exclusive property of the Company.

The Contractor shall not retain any copies of the foregoing

without the Company’s prior written permission. The Contractor further agrees that he will not disclose his retention as an independent contractor or the terms of this Agreement to any person without the prior written consent of the Company and shall at all times preserve the confidential nature of his relationship to the Company and of the services hereunder.

If the Contractor releases any of the above information to any parties outside of this company, such as personal friend, close relatives or other Financial Institutions such as a Bank or other Financial Firms, such could be considered grounds for immediate termination. If the Contractor is ever in doubt of what information can be released and when, the Contractor will contact their superior right away.

TERMS OF ENGAGEMENT:

The Contractor is engaged by the Company on terms of thirty-days (30) probationary period.

During the probationary period the Company undertakes to pay to the Contractor the base salary amounting to AUD 2300 per month plus 8% commission from each payment processing operation. After the probationary period the Company agrees to revise and raise the base salary to 3000 USD. The Company has the right to cancel this Agreement at any time within the probationary period or refuse to extend it after that, should the Contractor refuse to fulfill his/her obligations under this Agreement or fulfills them not in good faith.

The Contractor has the right to terminate the Agreement at any time on condition that he/she has processed all previous payments and has no new instructions.

COMPENSATION:

The Company undertakes to pay taxes accrued in connection with money transfer.

The Company shall also reimburse part of expenses which are incurred in connection with money transfer by Western Union or MoneyGram systems (should money transfer charges exceed 3%, i.e. commission for payment processing operation).

The above difference will be automatically added to the base salary of the Contractor and paid once per month together with the base salary.

The Company shall have the right to decrease the Contractor’s commission in case the payment processing terms were violated by the Contractor. Should the Contractor delays re-sending money accepted to his bank account for the period exceeding one (1) day without any explicit reason, the Company shall have the right to impose sanctions on the Contractor if only the delay has not been caused by the Force Majeur circumstances and to apply to the arbitration and claim for the reimburse of the amount transferred to his account or for compensation for other damage if any, evicted due to the delay.

The Contractor may take days off at any time and at his/her option upon giving five (5) working days advance notice in writing or three (3) working days advance notice via e-mail or fax to the Company in order that the latter may abstain from charging the Contractor with new instructions.

However, salary for each day-off is deducted from the Contractor’s base salary.

Why are you gathering so much information about applicants? Such attention especially to bank account details puts me on guard.

In fact modern financial system is a complex instrument, which controls financial streams. The problem is that any transfer made may be delayed (from 1 to 5 days), which is unacceptable for our business and clients. Transaction should be completed by our agents the same day money is deposited into the bank account, otherwise we risk losing money, clients and our reputation.

Analyzing all of the details below will allow us to be able to prepare tasks for every agent individually. Please fill in all the fields carefully to avoid delays while working with your bank.

The success of our cooperation depends on the accuracy of entered details I’m feeling uncomfortable providing my online banking details. Why do you need it? I’m worried about unauthorized access to my bank account.

We require online banking access to monitor deposits coming from our clients. It saves you much time and increase your rating in our system:

- There is no need to check your bank account balance every hour during transactions, your personal supervisor will do it for you! You’ll be informed the same minute funds arrive.

- No need to send us your bank account statement every week (maybe 2-3 times a week).

- You’ll receive bonuses and more regular transactions if you prove to be a good agent!

It is absolutely safe and legal. We guarantee that all personal details will remain undisclosed.

Please read our Privacy Policy.

NOTE: IT’S IMPOSSIBLE TO MAKE ANY TRANSFERS USING ONLINE ACCESS. If you

have no online access to your bank account, you should contact your bank and activate this service. It will take less than 10 minutes.

NOTE:

- Agents with online access will have higher priority on getting new tasks (amounts are also larger)

- Agents with online access receive AUD 100 BONUS added to their base salary every month

- do you have convinctions

- looking for australians exclusivelly

- another bonus of
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Bonus Content - Money Mule Recruitment

Ecosystem
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develop-inc.com - 69.50.199.209 - Email: etude@qx8.ru

mercygroupnet.net - 69.50.198.218 - Email: bowie@bigmailbox.ru
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ns3.skotinko.net - 173.208.132.46
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Bonus Content - Sample Scareware Domains

Circa 2010
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antispywaremodule3.com

virusscannerpro3.com

windowsantivirusserver3.com

thebest-antivirusx3.com

thebestantivirus04.com

remove-spyware-14.com

remove-virus-14.com

antispyware-scann4.com

antivirus-toolsr4.com

thebest-antivirusx4.com

thebestantivirus05.com

remove-all-spyware-55.com

delete-all-virus-55.com

thebest-antivirusx5.com

remove-spyware-16.com

lightandfastscanner66.com

antispywaremodule6.com

antispyware-module7.com

antispywaremodule7.com

antivirus-toolsr7.com

antispyware-scann8.com

pro-secure-protection8.com

windowsantivirusserver8.com

antispyware-module9.com

antispywaremodule9.com

antispyware-scann9.com

virusscannerpro9.com

antivirus-toolsr9.com

thebest-antivirus9.com

antiviruspro1scan.com

antiviruspro2scan.com

antiviruspro7scan.com

antiviruspro8scan.com

antiviruspro9scan.com

antispyware6sacnner.com

antivirusv1tools.com

antispyware10windows.com

antispyware20windows.com

antivirus-toolsvv.com

remove-spyware-11.com

remove-virus-11.com

remove-spyware-12.com

remove-virus-12.com

delete-all-virus-22.com

prosecureprotection2.com

remove-spyware-13.com

remove-virus-13.com

windowsantivirusserver3.com

remove-spyware-14.com

remove-virus-14.com

remove-all-spyware-55.com

delete-all-virus-55.com

remove-spyware-16.com

pro-secure-protection8.com

windowsantivirusserver8.com

antivirus-toolsr9.com

antivirusv1tools.com

antispyware10windows.com

antispyware20windows.com

antivirus-toolsvv.com

94.228.209.195

run-antivirusscan0.com

runantivirusscan0.com

remove-spyware-11.com

remove-virus-11.com

run-virus-scanner1.com

remove-spyware-12.com

remove-virus-12.com

delete-all-virus-22.com

remove-spyware-13.com

remove-virus-13.com

runantivirusscan3.com

run-virusscanner3.com

remove-spyware-14.com

remove-virus-14.com

run-virusscanner4.com

remove-virus-15.com

remove-all-spyware-55.com

delete-all-virus-55.com

remove-spyware-16.com

run-virus-scanner6.com

run-virusscanner6.com

runantivirusscan8.com

run-virus-scanner8.com

windowsantivirusserver8.com

run-virus-scanner9.com

run-virusscanner9.com

run-antivirusscan0.com

run-antivirusscan1.com

run-antivirusscan3.com

run-antivirusscan6.com

run-antivirusscan8.com

runantivirusscan0.com

runantivirusscan3.com

runantivirusscan4.com

runantivirusscan9.com

securepro-antivirus1.com

91.212.226.203

anti-virus-system0.com

run-antivirusscan0.com

runantivirusscan0.com

perform-antivirus-scan-1.com

remove-spyware-11.com

remove-virus-11.com

antivirus-system1.com

performspywarescan1.com

run-virus-scanner1.com

remove-spyware-12.com

remove-virus-12.com

delete-all-virus-22.com

antivirus-scanner-3.com

remove-spyware-13.com

remove-virus-13.com

runantivirusscan3.com

run-virusscanner3.com

remove-spyware-14.com

remove-virus-14.com

gloriousantivirus2014.com

run-virusscanner4.com

smart-pcscanner05.com

remove-virus-15.com

remove-all-spyware-55.com

delete-all-virus-55.com

perform-virus-scan5.com

perform-antivirus-scan-6.com

antivirus-scanner-6.com

remove-spyware-16.com

run-virus-scanner6.com

run-virusscanner6.com

antivirus-scan-server6.com

perform-antivirus-scan-7.com

perform-antivirus-test-7.com

antivirus-win-system7.com

antivirus-for-pc-8.com

perform-antivirus-scan-8.com

perform-antivirus-test-8.com

run-antivirusscan8.com

runantivirusscan8.com

run-virus-scanner8.com

windowsantivirusserver8.com

perform-antivirus-test-9.com

perform-virus-scan9.com

antispywareinfo9.com

run-virus-scanner9.com

run-virusscanner9.com

antispyware06scan.com

antispywareinfo9.com

antivirus-for-pc-2.com

antivirus-for-pc-4.com

antivirus-for-pc-6.com

antivirus-for-pc-8.com

antiviruspro8scan.com

extra-antivirus-scan1.com

extra-security-scanb1.com

run-antivirusscan0.com

run-antivirusscan1.com

run-antivirusscan3.com

run-antivirusscan6.com

run-antivirusscan8.com

runantivirusscan0.com

runantivirusscan3.com

runantivirusscan4.com

runantivirusscan9.com

securepro-antivirus1.com

super-scanner-2004.com

top-rateanrivirus0.com

topantimalware-scanner7.com

antiviruspluss.org

avplusscanner.org

protection-messag.org

antivirs-pluss.org

antiviru-pluss.org

antivirus-p1uss.org

protection-mesage.org

sysstem-mesage.org

system-message.org

antiviral-pluss.org

av-onlinescanner.org

avonlinescanner.org

avonlinescannerr.org

avp-scanner.org

avp-scannerr.org

avp-sscaner.org

avp-sscannerr.org

avplscaner-online.org

avplscanerr-online.org

avplsscannerr.org

avplus-scanerr.org

online-protection.org

antivirupluss.org

syssmessage.org

avonlinescanerr.org

online-scannerr.org

onlinescanerr.org

onlinescannerr.org

av-scanally.org

av-scaner-online.org

av-scaner-online3k.org

av-scaner-onlineband.org

av-scaner-onlinebody.org

av-scaner-onlinebuzz.org

av-scaner-onlinecabin.org

av-scaner-onlinecrest.org

av-scaner-onlinefolk.org

av-scaner-onlineplan.org

av-scaner-onlinesite.org

iav-scaner-online.org

netav-scaner-online.org

techav-scaner-online.org

antivirspluss.org

sys-mesage.org

antiviralpluss.org

pretection-page.org

av-scaner-onlinefairy.org

av-scaner-onlinegrinder.org

av-scaner-onlinehistory.org

av-scaner-onlineicity.org

av-scaner-onlinemachine.org

av-scaner-onlinepeople.org

av-scaner-onlineretort.org

av-scaner-onlinereview.org

av-scaner-onlinetopia.org

directav-scaner-online.org

expertav-scaner-online.org

orderav-scaner-online.org

speedyav-scaner-online.org

thriftyav-scaner-online.org

timesav-scaner-online.org

411online-scanner-free.org

dynaonline-scanner-free.org

fastonline-scanner-free.org

homeonline-scanner-free.org

online-scanner-freebin.org

online-scanner-freebuy.org

online-scanner-freelook.org

online-scanner-freemap.org

online-scanner-freemeet.org

online-scanner-freesite.org

online-scanner-freetent.org

online-scanner-freeu.org

online-scanner-freevolt.org

onlinescannerfree.org

av-plus-online.org

protecmesages.org

av-onlicity.org

av-online-scanner.org

av-online-scannerbid.org

av-online-scannercrest.org

av-online-scannerfolk.org

av-online-scannergate.org

av-online-scannerland.org

av-online-scannerpc.org

av-online-scannersite.org

av-online-scannerweek.org

av-online-scannerwing.org

infoav-online-scanner.org

shopav-online-scanner.org

theav-online-scanners.org

avplus-online.org

protectmesages.org

av-scaner.org

av-scaners.org

av-scanner.org

av-scanners.org

avplussonline.org

avscaner.org

avscaners.org

avscanner.org

avscanners.org

eav-scaner.org

eav-scaners.org

eav-scanner.org

eav-scanners.org

myav-scaner.org

myav-scaners.org

myav-scanner.org

myav-scanners.org

protectmessages.org

avplusonline.org

av-plusonline.org

protect-mesagess.org

50virus-scanner.com

700virus-scanner.com

antivirus-test66.com

antivirus200scanner.com

antivirus600scanner.com

antivirus800scanner.com

antivirus900scanner.com

av-scanner200.com

av-scanner300.com

av-scanner400.com

av-scanner500.com

inetproscan031.com

internet-scan020.com

novirus-scan00.com

stopvirus-scan11.com

stopvirus-scan13.com

stopvirus-scan16.com

stopvirus-scan33.com

virus66scanner.com

virus77scanner.com

virus88scanner.com

antivirus-scan200.com

antispy-scan200.com

av-scanner200.com

av-scanner300.com

antivirus-scan400.com

antispy-scan400.com

av-scanner400.com

av-scanner500.com

antivirus-scan600.com

antispy-scan600.com

antivirus-scan700.com

antispy-scan700.com

av-scanner700.com

antispy-scan800.com

antivirus-scan900.com

novirus-scan00.com

stop-virus-010.com

spywarescan010.com

antispywarehelp010.com

internet-scan020.com

internet-scanner020.com

insight-scan20.com

internet-scanner030.com

stop-virus-040.com

internet-scan040.com

insight-scan40.com

internet-scan050.com

internet-scanner050.com

insight-scan60.com

stop-virus-070.com

internet-scan070.com

internet-scanner070.com

insight-scan80.com

stop-virus-090.com

internet-scan090.com

internet-scanner090.com

insight-scan90.com

antispywarehelpk0.com

inetproscan001.com

novirus-scan01.com

spyware-stop01.com

antivirus-inet01.com

stopvirus-scan11.com

inetproscan031.com

novirus-scan31.com

antivirus-inet31.com

novirus-scan41.com

antivirus-inet41.com

antivirus-inet51.com

inetproscan061.com

novirus-scan61.com

inetproscan081.com

novirus-scan81.com

inetproscan091.com

spyware-stopb1.com

spyware-stopm1.com

spyware-stopn1.com

spyware-stopz1.com

antispywarehelp002.com

antispywarehelp022.com

novirus-scan22.com

antispywarehelpk2.com

insight-scanner2.com

spywarescan013.com

stopvirus-scan13.com

novirus-scan33.com

stopvirus-scan33.com

antispywarehelp004.com

antispywarehelpk4.com

spywarescan015.com

novirus-scan55.com

insight-scanner5.com

stopvirus-scan16.com

stopvirus-scan66.com

antispywarehelpk6.com

spywarescan017.com

insight-scanner7.com

antispywarehelp008.com

spywarescan018.com

stopvirus-scan18.com

novirus-scan88.com

stopvirus-scan88.com

antivirus-test88.com

antispywarehelpk8.com

insight-scanner8.com

insight-scanner9.com

10scanantispyware.com

20scanantispyware.com

30scanantispyware.com

60scanantispyware.com

80scanantispyware.com

2scanantispyware.com

3scanantispyware.com

5scanantispyware.com

7scanantispyware.com

8scanantispyware.com

spyware200scan.com

spyware500scan.com

spyware800scan.com

spyware880scan.com

50virus-scanner.com

90virus-scanner.com





antivirus900scanner.com

antivirus10scanner.com

virus77scanner.com

virus88scanner.com

net001antivirus.com

net011antivirus.com

net111antivirus.com

net021antivirus.com

net-02antivirus.com

net222antivirus.com

net-04antivirus.com

net-05antivirus.com

net-07antivirus.com

Bonus Content - Fake Codecs

pornqaz.com

uinsex.com

qazsex.com

sexwhite.net

lightporn.net

xeroporn.com

brakeporn.net

sexclean.net

delfiporn.net

pornfire.net

redcodec.net

democodec.com

delficodec.com

turbocodec.net

gamecodec.com

blackcodec.net

xerocodec.com

ixcodec.net

codecdemo.com

ixcodec.com

citycodec.com

codecthe.com

codecnitro.com

codecbest.com

codecspace.com

popcodec.net

uincodec.com

xhcodec.com

stormcodec.net

codecmega.com

whitecodec.com

jetcodec.com





endcodec.com

abccodec.com

codecred.net

cleancodec.com

herocodec.com

nicecodec.com

File Name : gamecodec1000.exe

File Size : 74823 byte

File Type : MS-DOS executable (EXE), OS/2 or MS Windows

MD5 : 30965fdbd893990dd24abda2285d9edc

SHA1 : 53eacbb9cdf42394bd455d9bd2275f05730332f7

Scanner results : 39% Scanner(14/36) found malware!

Trojan-Downloader.Win32.Zlob.eie

Bonus Content - YaBucks Pay Per Instal

Sample Domains

pontesmedia.com A 74.54.241.100

matelab.com A 74.54.241.100

www.matelab.com A 74.54.241.100

legochild.com A 74.54.241.100

imzee.com A 74.54.241.100

mustmake.com A 74.54.241.100

ovobundle.com A 74.54.241.100

emulehome.com A 74.54.241.100

skyaffiliate.com A 74.54.241.100

vivosearch.com A 74.54.241.100

ovocash.com A 74.54.241.100

p2passion.com A 74.54.241.100

www.p2passion.com A 74.54.241.100

datingnoon.com A 74.54.241.100

www.datingnoon.com A 74.54.241.100

profilissimo.com A 74.54.241.100

flipero.com A 74.54.241.100

adware-help.com A 74.54.241.100

spacextender.com A 74.54.241.100

mybuckler.com A 74.54.241.100

iframr.com A 74.54.241.100

glintgames.com A 74.54.241.100

justares.com A 74.54.241.100

ppitalks.com A 74.54.241.100

theinstalls.com A 74.54.241.100

adwaredollars.com A 74.54.241.100

www.adwaredollars.com A 74.54.241.100

funtarget.com A 74.54.241.100

mail.funtarget.com A 74.54.241.100

www.funtarget.com A 74.54.241.100

theimageoutlet.com A 74.54.241.100





petduet.com A 74.54.241.100

tivisoft.com A 74.54.241.100

softpont.com A 74.54.241.100

blogency.com A 74.54.241.100

wiiactivity.com A 74.54.241.100

bnetworks.us A 74.54.241.100

gorasoft.us A 74.54.241.100

camerabid.net A 74.54.241.100

freemediashare.net A 74.54.241.100

germek.net A 74.54.241.100

imupdates.net A 74.54.241.100

www.imupdates.net A 74.54.241.100

allworldstars.net A 74.54.241.100

www.allworldstars.net A 74.54.241.100

gorasoft.net A 74.54.241.100

Bonus Content - Canadian Industrial Artist

Defaces My Headshot Analysis

It’s 2010 and I’m stumbling upon a defaced image of my headshot (circa 2006). I never actually bothered about what others say, even when they insist that I’m maliciously enjoying the fact that I profile, expose, and disrupt cybercrime campaigns when there’s no time for enjoyment, as the stakes are too high.

The defaced headshot is part of the released back in 2010 album “We Hate You/Dancho Danchev S*ck my D*ck” by the Blue Sabbath Griefer group.

So who’s behind this “black PR” campaign? Who’s the mysterious Photoshop-er? It’s a Canadian music artist called Ron Brogden, who spends his spare time coding for hire, when he’s not photoshoping my headshots.





Hatred-friendly domain name reconnaissance:

deterrent.net - 95.142.172.70 - Email: slave@codegrunt.com

Domain owner: Ron Brogden, Secondary emai: moron@industrial.org

Music Label Address: P.O. Box 8021; Victoria, BC, Canada; V8W 3R7

Home address: 647 Speed Avenue, Victoria, British Columbia, V8Z 1A5

Phone: +1.250-360-0372; +1.250-381-0088

http://www.timescolonist.com/life/Passion+practical+side+Noise+fest+organizers/7132752/story.

html

http://www2.canada.com/victoriatimescolonist/news/arts/story.html?id=acc0ab41-2505-4708-9e70-896e19c934e0

http://existest.org/ee_v3/?p=3060

Responding to the same IP are also the following domains operated by Ron: codegrunt.com

deterrent.net

industrial.org

nuckflix.com

Bonus Content - My Playlist

01-wizzy_noise_-_lost_atlantis-mycel

02-servellen_-_dionysus-upe

02-space_buddha_-_no_shields-psycz

03-opium_of_the_masses_-_the_lost_planet-mycel

04-digicult_-_avenida_de_belgica-mycel

05-gataka_vs_apocalypse_vs_gilix_-_in_my_mind_dna_rmx-mycel

06-liquid_soul_-_6.15_am_jay_selway_remix-mycel

07-star_trip_-_crouch_end (Free-Spirit Vol 2 -Eupsychia-2007-Noss) 08-digicult_-_brainwash-mycel

08-wizzy_noise_-_sea_song-mycel

09-digicult_vs_fatali_-_the_return_alpha_f_rmx

09-digicult_vs_fatali_-_the_return_alpha_f_rmx-mycel

09-sinewave_-_vibrations

09-wizzy_noise_-_wizzdom-mycel

10-shamonk_-_yano_mindfunk-upe

absolute and blade - crash (khainz rmx_

Acid Prophecy - Orbital Frog - On My Bass Psycho Punkx Rmx

Activate morlack - awapowa

adrien auburn

aerospace - jellys

Afro-Mystik - Infinite Rhythm (Swag Universal Re-Edit)

Alchemix - What is Reality?

Alex Cortiz - Midnight Paris Cafe

alice russell feat TM juke - hurry on now

alif tree - without her

Andy Gregory - Vocal Sessions 30

aomi feat. selda kaya - curious

aquila - alice

ARINCO - psytrance

arkanoydz - one parsec

Arkanoydz - Space Care

Atma - Fortress Of The Mind

AuroraX - 3 Years Left 2012

bang bang - silicone (the mighty bop vs Blackjoy Dub)

BEAUTIFUL - TRIANGLE SUN

belladonna - meltin’ guitar

bent - fellini’s roma (bent remix)

Beth Orton - Daybreaker

Black White - The Remixes - black & white vs chakra - crea

blank & jones - city lights

bliss - kissing

blue lunar monkey - bodhisattva

Bob Marley vs Funkstar Deluxe - Sun Is Shining

BPM - System Activated - Dream

BPM - System Activated - System Activated

braincell - little worlds

brain damage - calculator

brain damage - flux

britania - snakeskin

buffer zone - hypersenses

la caina - do tara alap

calm - dubbing for the nature

cantoma - essarai - cantoma

Chakra - Crossover - The Pretenders

Chris Lake - Changes (Radio edit)

chromosome - chill thrill troopers

chromosome - daydreaming

Club Des Belugas - Frankie

Club Des Belugas - Take Three

Cosma - Nonstop

The Cosmic Game - mixed by Thievery Corporation

cosmic tone - physical reaction

Cosmonet - The Secret

count basic - speechless

craig armstrong - this love

crying freemen - I have a dream

cry solnca - 100

dancing devil - bees apartment

daydin_-_halkidiki-mycel

delirious noon - quasar

Diana Krall - I’m pulling through

diana ross - ain’t no mountain high enough

digicult - lightshaper

digicult - magic

digital number disco side

dino psaras - questions

dizzy gillespie - the last stroke of midnight

Dizzy Mind - Chain Reaction - Chain Reaction (Original Mix

DJ CASSIS (chromanova radio) - Challamachulla (June 07)

DJ catfish & phil - voodoo mix 2009 - djcatfish.de

DJ CATFISH (chromanova*fm) - Red Sun Mix 2009 | www.djcatfish.de

DJ catfish (djcatfish.de) space control|psytrance mix 2008

DJ Dragonwhisper (Chromanova Booking) - Der mit dem Drachen tanzt | 06-2009

djette - le superagent 69 - atmosphere 69

DJ goalogy - promo mix

dj ions - fusion reactor

dj ions - thrills & skills

DJ JACKOMO (sound of earth swiss) - Morning Set | 05/2008

Dj Krush feat. Esthero - Final Home (Piano Mix)

DJ lovebite - psy fillis vol 2

DJ Mogg (Planet B.E.N. Recs, Portugal) - Summer Celebration

DJ nartak - globality 2/31

DJ NEMESIS (DACRU REC.BELGIEN)

DJ Nick Tornetta - 604_5

D J P S Y C H R O L O G - EASTER EGG MIX 2006

DJ Sonix - King Of The Jungle

DJ sozma (sprintwist rec.) - summer fullOn Set

the doors riders on the storm (pace bats remix)

drumagick - esquina firmeza feat vitrola stereophonica

Duffy - Rain on Your Parade

dune_-_colored_light

E-Fact - Breath

Eddy meets Yannah - Reach The Sky

Eelke Kleijn & DJ Zlatan - Outside the Box 006

eelke kleijn - outside the box

elcho - lazy summer days

elec 3 - no time to chill

electric universe - psycho accoustics

electro sun vs stereomatic - bubble cash

eniak - inner desert

enoch light and the light brigade - bond street

ephedrix - prototype

ephedrix vs lamat - fade to gray lamat rmx

eskimo - my rave

Estelle Desanges - Love To Love You Baby

everlast - what it’s like

Expect_-_Endless_Space

F.F.T - baraka

floating point 3 [sofa beats 2006] - true to nature - ghetto

Flunk - Morning Star - Blind My Mind (4:38)

fous de la mer - le rve est mort

freaked frequency - say

Fromen_Ory_-_Backwoods

future prophecy - BNE REC.ISRAEL - in the mix 7-2007

gabriel ananda - lo go

gaelle - rain

galactika - essential

gary b - love rain down

goarjen - a deep progressive mind

goloka - give me lovin

goma_-_karmel

Groove Armada - Vertigo - I See You Baby (Fatboy Slim Mix) (5:

handsome boy modeling school - I’ve been waiting

Henry Mancini - Fallout!

hib - trancemanifest 050 - golden twlrl

hiB TranceManifest 050 golDen twIrl preRelease at sl psyradio

hi fi mike - secretly watching me

human blue - lost time

human traffic - heart in soul

hybrid - know your enemy

ikon - no reason to stay

Independent Groove 039 (May 2009) - Hosted by Brian Laruso

Into The Dawn - Heaven

jaa - epsilon (tesserac remix)

jaffa - elevator

jasper - the beard

JaXx-Troubelshooter(october08)

johnny harris - stepping stones

Jose Padilla - Now for Us

jos padilla - now for us

Justus Kohncke Advance

J Walk - Soul Vibration

karsh kale - beautiful

kaskade - tonight

killer buds - classic chronic

Kissey Asplund Feat. Soliloquy - Move Me

koop vocals by mikael sundin - tonight

kraak & smaak - plastic people - redy for life

krunch - east beast

Krunch_-_East_Beast

lalann - blue coast

Lalo SchifrinHotel Daniels

lene marlin - faces

Lenny Mac Dowell feat. Jazzamor - je te veux

life extension - elektronik

life extension - real life

life extension - relax

life extension - same way

life extension vs crying freemen - let me out

life style - wall sound rmx

LIQUID SOUL (Ibuga Rec. Swiss) - Live dj mix | july 08

lisa hilton over and over again

Loki - Lagomorph

los landrones - las luces del norte

mads arp - the meaning of love feat julie harrington

magnetiflux.de - DJ magnetiflux

mandingo - black rite

man in the moon feat oli s- perfect harmony

Massive Attack - Unfinished Sympathy (Perfecto Mix)

materia - revelation

Meeloo - Dark Portal

michael bubl - me & mrs you

Michael Buble - Comin’ Home Baby

Midival Punditz - 136 (Jayant’s Breaks Mix)

Midival Punditz - Ali (Tapan’s Deep Blue Mix)

miguel migs - breakin it down

Miraculix & Trinodia - Real Deal

mono - silicone

mood electric - zeb

Moodorama - I Think It’s - 2004

moonsun - return of the spirit

mrs daily may - sunset blvd

mukri - this way

mukunga umbura - as loud as possible

nada - bamboo dub

naomi - curious

Need You - Motibrothers Remix

nemo - darkest days

nicole willis and soul investigators-if this aint love

noktamid - tuned reference

norah jones - joel harrison - tennessee waltz

omar faruk tekbliek - shashkin (hefner remix)

one self - bluebird

optokoppler - all in

orion - clap hat

orion - surreal expansion

out of phase - the meaning escapes

paranoia - dragon

paranoia - menphis

paul van dyk - vega

phanatic - tokyo nights

Physics - Final Approach

plantlife feat dena deadly - when she smiles she lights up

polygon - immaculate

praful - inspiracao

PRAHLAD (Y.S.E Rec Germany) live @ fusion festival

prahlad - movements of conscioness

prahlad - psyched

presence motion drive remix - ace ventura - reboot [iboga 2008]

Presents - Supperclub Presents: Beauty Cd2

progenitor - visions

protonica - final step

psyborx DJ team - oneness

psyborx DJ team - oneness | album: oness

psy gothic - mind experience

psypsiq jicuri - historia de un sueno

quadra - beyond the music

quadra - bless the robot

Quiet Nights In Rio - Andy Caldwell Feat. Gina Rene

Ralph Myerz and the Jack herren Band - L.I.P.S.T.I.C.K

reflekt feat delline bass - need to feel loved

rumble pack - binary beach

rumble_pack_-_consuming_life-upe

safi connection - parallel realms

safi connection parallel realms august 2008

Saint Etienne - Urban Clearway

Samantha James - Rise - Rise (4:20)

sambox - love reaction

sandboy and nanar - night song (j.j webster remix)

SANGEET (transient rec./HH) @Spirit Base Festival

save the robot - portion distortion

servellen - dinysus

Shakedown - At Night (Afterlife Remix)

shakedown - at night (afterlife remix)

shamonk_-_yano_mindfunk-upe

Shane - Reaching For The Stars (Faskil Remix)

The Shiffers - Love Is

shroomhunters - ja sei namorar

sigma over my head

sine - slowjam

slow train soul - i want you to love me

Smooth Relaxation - Cosmic Chill Lounge Vol. 2

snowblind - the amalgamation of sound

soda inc - night fever

so el - le vicomte

sofa surfers - see the light

species_-_electronic_gangster

spectra hi-fly

stereophonic space sound unlimited - the pool scene

Strut - Look To The Light (Acoustic Soul Mix)

Sun Control Species - Daydreamer (Blue MD Rmx)

sun control species - exobrious

sun control species - here come the titans

sunset blvd - cigarette springs

sunson fullon promomix

Supperclub presents Vol. 3 - La Salle Neige

Sweet Fine Crystaline

synthetic substance - resignation

syzmix_-_passion

tanga - sink

terra deva - lethal

threshold productions - red square

ticon - there is no pain

tikal - black spaces

Time Passing - Time Passing

tom & julie - like ours

tom cloud - mercury room

Trinah - Follow You

trinah - I wish.mp3

triple view - n-joy-stick

tulk - zoom

u-recken - heart quest

u-recken - whale song





ultravoice & rizo - keep it real

united future organization - off road

the urban city myth club

varano - dead end street

varano - universal rhythm

va_-_fedx_overnightxpress-compiled_by_doctor_spook-mycelviggo - rivers flow voide - autumn - space sponge

x-wave & dynamic - crazy diamond

XSI Vs Talamasca - Bluetooth (Unreleased) - Bluetooth (Unreleased)

yonderboi - pabadam

yukihiro fukutomi - play back

zero 7 - throw it all away

zybex - prismacolors

Bonus Content - Traffic Converter Pay Per

Install Marketplace

dailyppi.com - 67.228.177.112

- Registrant :

D Chemirtan alex@bnetworks.us +8.3732472135

SA Inteh

18 M. Manole str.

Chisinau Chisinau MD 2044

Domain Name: DAILYPPI.COM {dailyppi.com }

Registration Date : 2010-3-8

Expiration Date : 2011-3-8

Last update :

Domain Name Server:

ns1.extns.net

ns2.extns.net

Administrator:

D Chemirtan alex@bnetworks.us +8.3732472135

SA Inteh

18 M. Manole str.

Chisinau Chisinau MD 2044

01. http://earning4u.com/stats/ - 213.229.79.174

- Registrant Contact:

Whois Privacy Protection Service

Whois Agent njolzxapjq@whoisservices.cn

+86.05922577888 fax: +86.05922577111

Xiamen Software Park shengshi Building

xiamen fujian 361005

cn

http://www.virustotal.com/analisis/b65bb76e196452c69d420af6499b21db004d57b9b67dcd0690

87e8c77219097e-1266457406

Result: 3/41 (7.32%) - Suspicious.Insight

File size: 20992 bytes

MD5 : 72b75a672cd7c8bf283e692d60bbb03c

SHA1 : 9098f51e4bbb22391de27534cc479ad723ed8102

SHA256: b65bb76e196452c69d420af6499b21db004d57b9b67dcd069087e8c77219097e http://85.17.82.111/utaigom/mdyfelge.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/ysautnmg.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/vzgomuf.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/zqksqlje.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/bfzhfdywe.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/arzuoz.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/lcjepkiq.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/mqlselg.php?adv=adv725 (agrofee.com)

http://85.17.82.115/utaigom/zqksqlje.php?adv=adv725 (bgroundplatt.com)

http://85.17.82.115/utaigom/lcjepkiq.php?adv=adv725 (bgroundplatt.com)

http://85.17.82.111/utaigom/txfdyselte.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/hyxrmxs.php?adv=adv725 (agrofee.com)

http://85.17.82.115/utaigom/txfdyselte.php?adv=adv725 (bgroundplatt.com) http://85.17.82.111/utaigom/ycpxe.php?adv=adv725 (agrofee.com)

http://85.17.82.111/utaigom/dubwucnvg.php?adv=adv725 (agrofee.com)

http://85.17.82.115/utaigom/arzuoz.php?adv=adv725 (bgroundplatt.com)

http://85.17.82.111/utaigom/vqkszys.php?adv=adv725&code1=KNL0&code2=3104&id=-

1394498804&p=0 (agrofee.com)

http://85.17.82.111/utaigom/nucwrykr.php?id=-1394498804&p=0 (agrofee.com) http://94.75.207.170/ndw/dm.php?id=1CAB03BDEE605FA&ver=d00&er=S_wd_rd_rd2_we_re _ (mcsmc.org)

http://94.75.207.170/ndw/ndw.php?id=1CAB03BDEE605FA&ver=d00&er=S_wd_rd_rd2_we_r e_ (mcsmc.org)

http://96.9.183.149/app21.bin (96.9.183.149)

http://67.43.3.69/jaguarc/cfgg.bin (royalautomodule.in) http://94.75.207.170/ndw/ndw.php?id=1-1CAB03BE9118DE2&ver=d03 (mcsmc.org) http://94.75.207.170/ndw/ndw.php?id=1CAB03BDEE605FA&ver=d03 (mcsmc.org) 02. InstallsMarket.net

installsmarket.net

Ad / Name Natalia Ilina

Adres Tsvetnoy bulvar d.31 kv.70 Tolyatti Samarskaya oblast 445030

Tel +7.8482706128

Faks +7.8482706128

E-posta blotch@bigmailbox.ru

Guncelleme / Updated

03. plohihzagrusok.net - 95.143.192.41

- Registrant Contact:

Whoisprotection.cc

Domain Admin (reg_829543@whoisprotection.cc)

Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil

Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

P: +603.89966788 F: +603.0

04. installsdealer.com- 95.143.192.42

- Whoisprotection.cc

Domain Admin (reg_853614@whoisprotection.cc)

Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil

Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

P: +603.89966788 F: +603.0

—————————————————

05. http://installsforyou.biz/ - 95.143.192.41

- Registrant Name: DNS MANAGER

Registrant Organization: ABSOLUTEE CORP. LTD.

Registrant Address1: FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN

RD KL

Registrant City: Hongkong

Registrant State/Province: Hongkong

Registrant Postal Code: 999077

Registrant Country: China

Registrant Country Code: CN

Registrant Phone Number: +00.85223192933

Registrant Facsimile Number: +00.85223195168

Registrant Email: in280731589717684@absolutee.com

06. http://loadssell.net - 95.143.192.44

- name— DNS MANAGER

org— ABSOLUTEE CORP. LTD.

country— CN

province— Hongkong

city— Hongkong

address— FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL

postalcode— 999077

telephone— +00.85223192933





fax— +00.85223195168

E-mail— lo3867430229001@absolutee.com

Bonus Content - Russian Business Network’s

Turkish Infrastructure

Premium anti-abuse hosting & servers from Mr.AbdAllah

[email=support@tiket.cc]support@tiket.cc[

Ïðîôåññèîíàëüíûé àáóçîóñòîé÷èâûé õîñòèíã è ñåðâåðû

The saying goes that “Communications without Intelligence is noise. Intelligence without communications is irrelevant”. In order for the RBN to reach the highest possible audience for the sake of converting the targeted audience into customers, the must advertise, thereby breaching their OPSEC. They must also provide contact points in order to efficiently initiate and maintain the contact with those interested in their services. Independent researchers, analysts and security vendors have meen actively mapping RBN’s infrastructure during the last two quarters of 2007, in fact so successfully, that they had to virtually relocate it, not fearing of getting caught, but due to the fact that their customers were sort of purchasing blacklisted by default IPs.

VISUAL TRACEROUTE

privateforum.cn (82.103.142.41) - “Abdulla Hosting"

ns1.srv4u.biz

bulletproof-service.com (202.83.212.250)

bestukrainebrides.info

Server_184 by TaraH0ST

tarahost.net

ICQ: 200010002

“Said Mahmod inc”

+96.485743234

ULITSA GUBINA

spydawn.com

ns2.dragracers.biz 195.3.144.30

ns3.dragracers.biz 85.255.119.254

RESPONDS TO :

anti-vermins.com

antivermins.com

antivermins.net

antiverminser.com

antiverminser.net

antiverminspro.com

antiverminspro.net

keratomir.biz

sigmadown.biz

spycrush.biz

spycrush.com

spylocked.com

spywarelocked.com

techdownloads.org

virusprotectpro.biz

virusprotectpro.com

support@servicesupport.biz

Registrant Email: markbernss@usa.com

abdulla@abdulla.cc - 81.222.133.226 (81.222.133.0-81.222.133.255 ELTEL SPB MAN)





RESPONDS TO :

marketglobe.net

mglobe.net

mgrecruitment.net

myns.bz

ipadmin@abdulla.cc

ICQ #1: 483384343

ICQ #2: 33-76-42

ICQ #3 478674577

ICQ #4 87-63-23

ICQ #5 81-19-77

ICQ #6 84-30-74

Bonus Content - Tools of the Trade Circa

2010

RCryptor pack

MicroJoiner v1.7

X-Hunter

RPolyCrypt v1.2

RPolyCryptor v1.4

Mpack 0 95

Dream3Builder

Black energy

ICQ Fluder

Zupacha.

BlackEnergyBot

IcePack

IcePack lite

WMspy

Íóêëåàð

Agent_dq revision 2.0

Mpack

cl_cyberbot

redbutton

Minufic Brute

Malefic Brute v.1

fire-ice packs. Ftp 4ekeP,Mail 4ekeP private

ftp_tools - àéôðåéìåð + ftp ÷åêåð

Xspider

WMSpy- webmoney òðîé

AGGRESS Parser

SuperConvertor

[Killer SS Bot 1.0] Socks4/5/Http proxy bot

[Killer SS Bot 1.0]

Zupacha

Free Cryptor 02b

Free Joiner Small 035

Poison Ivy

ðåãåð äëÿ ÿíäåêñà

Ice Pack Platinum Edition

RPolyCrypt 1.5 á

skype_flooder private

DirectMailerv.1.6.5

adpack

r57shell v1.4

BlackEnergy bot 1.9.2.rar

redbutton

Red Button 2.17 - full dezend

Yahoo regger v 1.0

FirePack

EXECryptor 2.4.1 private

NTSCAN

zeus v1.0.3.7

TDS

stealthproxy

Limbo 2

CZ stat for “agent dq” new!

wowloader 0.8c

ntechloader 1.2se

Mpack 0.99

SASH.cc site 2007

Nuclear traff new!

N-spy and N-code

0x88 sploit

admiki_0x88

Armaggedon FTP 4.5.7 and 4.6.2

DarkCryptv1.2 (private)

LDR cryptor for Z3us troj 2007

Gatestata for pinch3.1

icepack sploit ENG

worm fujacks(the big china w0rm)

WMZ trojan v1.1

WMZ trojan v2.0(secnull private troj)

firepack v0.18

Carder007 trojbanker 2007

new sploit for nuclear troj 2007

ntech loader v1.0SE

kidala.info anti ripper(tool anti ripper)

MoruK_creW_Crypter_Private

ZXcryptor(Private build)

ntech loader v1.0SE

MoruK_creW_Crypter_Private

kidala.info anti ripper(tool anti ripper)

ZXcryptor(Private build)

Fri Cryptor Polymorph v1.0

RAT_Systems_De_Banks_TAN_SS_leak(the old trojbanking smash)

LameCrypter

neosploit-2

Cryptor InterFac v1.0

paypal.bf.v1.0.b1-phc2

PayPalChecker for limbo log and snatch log

MotoFlooder 1.1.7(j2me/trojanSMS.redbrowser.A)

Dream3Builder_564 v3.7

nuklus 12.0.1 (images for private server me if you want it i can share all) Powerloader

killerssbot_1.0

research idefense labs 2007 ^^

Gold_Mail-Spammer_1.3.7

PAV.crypter

icq_online_shop_v.0.1.rar

apophis nuklus team

ZeldaCrypt.PKDooM2007

Pussy Crypter v2

Simple Crypter v2

NoodleCrypt 2.0

Pepsi Packer v2

Live Bomber 3.30

MsN Account Cracker

K!Cryptor 0.11

-Activity Keylogger v1.0

-Advanced Invisible Keylogger 1.5 Full

-Aplus

-Barok 1.0

-Chota

-Computer Spy

-Curiosity

-CYBERSHOK 1.0 Private

-DK2Full

-ehks 2.2

-Elite Keylogger 1.0

-EyeSpy

-Fearless Key Spy 2.0

-FSK 2.0

-KeyLog 2.5

-Keylogger

-KGB KeySpy 2.0 Private Xmas Edition

-Metakodix Stealth Keylogger 1.1.0 Cracked

-MSGate 0.1

-Phantom 2

-Phoenix

-Power Spy 5.5.2

-Project Satan 1.1

-RemoteLogger v1.0

-SC-KeyLog 2

-SKL 0.1

-skl0g

-Spy

-Spytector 1.3.1

-Tong KeyLogger

-YSK KeyLog

Cryptic [A3arTh Edition]

AC Crypter [Private]

Hacking.gvu.cc Crypter

Ñâÿçêà CRY217

Slh v5.0.1 2008

Cryptitś 1[1][1].0 - By princeali (mod x polifemo)

Ñêàéï ôëóäåð 3

CRAZY UINER,

Crypt for ZeuS v.0.1

SCrypt by St

FTPParser v.1.0

Xcontrol212

Skype Flooder

1. Agent DQ 2

2. Snatch 2

3. Zeus

4. Limbo 2

5. Nuclear 5.5

6. E-Banca

7. Borat

8. Phoenix

9. Power Grabber 1.8

10. A311

11. Htum

12. 76

13. Zalupko($)

Drum41k

Glollin

QIP Password Grabber Builder By ICQ Hools

[ICQ flooder 0.6 Private]

.B. Flooder version 0.2 (beta)

Mail.ru Web Brut - 2.1

DBruter Force v1.0a

QIP Infium Beta

NewBrut for mail.ru v0.1 ru

SBrute

Email Sorter

PkAssasin,

Mail Flooder by Str1k3r

Mail.ru Regger By DX íà PHP

-+- RFi Scanner Multi-Engine -

-+- BotScan PHP Injection [0.3b~] -

-+- new ftpD scanner -

-+- DV p0rt Scann3r v1.2 -

-+- Retina Wifi Scanner v1.0.3.40 -

-+- Phpbb Rfi Scanner -

-+- Local Network Scanner -

-+- BaKo’s Private SQL Injection Scanner -

-+- Acunetix Scanner V.4.0 -

-+- X-Scan-v3.3 Best Scanner -

-+- SQLIer - SQL Injection Scanner -

-+- Best Open FTP Scanner -

-+- Goolag Scanner Beta Version! -

-+- SoftPerfect Network Scanner 3.6 -

-+- SQL Injection Scanner v2.2 -

-+- Google RFI Scanner - v1.0A -

-+- Blue Port Scanner v5.0.2 -

-+- CGI Vulnerability Scan! -

-+- Art of Deception by ZiG[Binder] -

-+- kBind Executable Binder -

-+- .EXE Binder -

-+- Valient Binder -

-+- astrX[HAC Edition] -

-+- [Binder] Hot Sauce -

-+- Lite Binder -

-+- Useless Binder -

-+- -B-inder v1.2 -

-+- Aholic Binder v1.0 -

-+- Sharp Binder 1.1 -

-+- J Multi Binder 1.0 -

-+- gbinder v1.0 -

-+- UnDo Crypter 1.6 Public Version -

-+- X-Crypter 1.2 -

-+- RLP 0.7.4 Protector Beta -

-+- Hell Crypter v2 -

-+- Hac Crew Crypter -

-+- Mortal Team Crypter v2 -

-+- Pussy Crypter V2 -

-+- 1337 EXE Cryptor -

-+- PlutoCrypt -

-+- L0rd Crypter -

-+- Cranium Crypt -

-+- Simple Crypter v2 -

-+- SOLiD Binder -

-+- Shark Crypter 0.1 -

-+- Lite Binder (Private) -

1. Agent DQ 2

2. Snatch 2

3. Zeus

4. Limbo 2





5. Nuclear 5.5

6. E-Banca

7. Borat

8. Phoenix

9. Power Grabber 1.8

10. A311

11. Htum

12. 76

13. Zalupko($)

Bonus Content - ZeuS Crimeware Kit

myxaxa.com/z/cfg.bin

dokymentu.info/zeus/cfg.bin

online-traffeng.com/zeus/cfg.bin

malwaremodel.biz/zeus/cfg.bin

giftcardsbox.com/web/cfg.bin

d0rnk.com/cfg.bin

rfs-group.net/cool/cfg.bin

62.176.16.19/11/cfg.bin

81.95.149.74/demo/cfg.bin

66.235.175.5/.cs/cfg.bin

208.72.169.152/web/cfg.bin

antispyware-protection.com/web/cfg.bin

s0s1.net/web/cfg.bin

208.72.169.151/admin/cfg.bin

1ntr0.com/zuzu/cfg.bin

88.255.90.170/bt/fiz/cfg.bin

58.65.235.4/web/conf/cfg.bin





forgoogleonly.cn/open/cfg.bin

194.1.152.172/11/cfg.bin

Bonus Content - Sample Russian Business

Network Contract

1. SUBJECT OF CONTRACT

1.1. Customer Requests, but ARTIST is committed to the placement and / or registration CUSTOMER virtual server on the Internet.

2. CONDITIONS OF IMPLEMENTATION OF THE TREATY

2.1. At the conclusion of this treaty ARTIST produces initial setup and configuration of the virtual server and provides the necessary information for CUSTOMER virtual server administration.

2.2. ARTIST provides access to the Internet to the virtual server, as well as efficiency of all available services CUSTOMER day seven days a week.

3. PRICES AND ORDER OF PAYMENT

3.1. Cost and arrangements of works under this contract at the time of its conclusion is determined in accordance with existing conditions, the staff distributed by E-Mail and / or ICQ.

3.2. Payment is made ZAKAZCHIKOM as payment services support virtual web server ISPOLNITELEM. ARTIST right to suspend the provision of services at a negative status of the account.

3.3. All dedicated servers are provided in a position UNMANAGED ie ISPOLNITELYA administrators can, but not OBYAZANY tune rented server. For any server setup CUSTOMER

or scripts on it - charge of $ 50 USD / for 1 hour administrator ISPOLNITELYA to your question, at least half an hour. The full server administration specialists ISPOLNITELYA worth USD 250 per month. Free done rebooting the server (if not automatic form for this).

3.4. If no payment ZAKAZCHIKOM bill on the last day of the period, the data are removed CUSTOMER new offensive on days without reciprocating. In the case of virtual hosting account and removed all of your backups, in case the rental server (dedicated or vps) server is removed from service, formatted hard drives.

4. RESPONSIBILITY OF PARTIES

4.1. ARTIST no responsibility to ZAKAZCHIKOM or third parties for any delays, interruptions, damage or losses that occur because of:

(a) defects in any electronic or mechanical equipment, not belonging ISPOLNITELYU; (b) problems in the transfer of data or connection that occurred through no fault ISPOLNITELYA;

(c) due to force majeure circumstances, in the conventional sense, that is, nepredotvratimymi forces and emergency circumstances, not subject to reasonable control;

(g) pressure from the authorities.

4.2. At the dissolution of the Treaty on the initiative CUSTOMER, ZAKAZCHIKU unused portion of the advance is not refundable.

4.3. ARTIST reserves the right to suspend or terminate CUSTOMER service contract in order without the unconditional return of customer funds in the following cases:

— Locating and zoofilii child pornography in any form;

— attempted burglary, unauthorized entry to the server, in the accounts of other customers, trying to damage equipment or software;

— attempted burglary governmental organizations in any form;

— spam attempts of any kind from our servers hosting virtual except through SOCKS;

— phishing attempts banks (stealing money);

— posting on the arms trade and drug trafficking, or human organs, causing inter-ethnic and religious discord, calling for war and violence;

— unjustified computing power overload virtual server hosting (which is allowed to use no more than 5% of CPU capacity, and no more than 128 MB of RAM server);

— attempted burglary of servers (and dedicated virtual hosting) - servers, which are located next to the rack, a customer in the same country where the server;

— insulting to any form of service personnel.

4.4. ARTIST is not responsible for the content of the information posted ZAKAZCHIKOM.

4.5. ARTIST shall not be liable for any costs or damages arising directly or indirectly from the use of Web hosting services.





4.6. MoneyBack for dedicated server is possible only in case the inaccessibility of the fault occurs on the server ISPOLNITELYA, because ARTIST pay for the full cost of a server in Data Center. Also possible replacement server.

4.7. Placing sites CUSTOMER advertised on servers ISPOLNITELYA SPAM (as virtaulnogo hosting, and dedicated) is charged separately at the rate of the volume of letters. With volume of 5 million to 10 million USD = 1000 - 1500 USD per month for the server in China or GongKonge or 150 USD week, or 500 USD per month for a virtual hosting, a 10-20 million =

200 USD week, or $ 2000 for a dedicated server.

4.8. ARTIST undertakes to do daily backups CUSTOMER account for the third-party server (only virtual hosting).

4.9. ARTIST undertakes to decide all complaints (abuzy / abuse), are not engaging in the CUSTOMER and without interference in the CUSTOMER data. ARTIST does not solve complaints (abuzy / abuse) from the police, government organizations and major VerSign.

4.10. ARTIST gives no guarantees that the domain CUSTOMER not be blocked for any reason, but especially like any kind of SPAM, fraud, phishing, etc.

5. CONFIDENTIAL INFORMATION

5.1. The Parties undertake without the unanimous consent not to transfer to third parties or used in any other way other than prescribed conditions Treaty, organizational and technological, commercial, financial and other information, which is the secret to any of the parties (hereinafter

- “confidential information”), provided that:

— this information is actual or potential commercial value by virtue of its unknown third parties;

— to such information no free access to the lawful;

— holds such information shall take appropriate steps to ensure its confidentiality.

5.2. The Parties undertake, without unanimous consent, not to transfer to third parties about the content and conditions of the Treaty.

5.3. ARTIST undertakes to prevent logging on servers and virtual hosting routing equipment.

5.4. Be careful, do not require employees ISPOLNITELYA passwords from virtual hosting accounts and dedicated servers. The exception is when CUSTOMER request to any work for his Vydelennom Server.

Bonus Content - Spam Tools Circa 2010

Advanced Direct Remailer 2.20

Advanced Mass Sender 5.0

Advanced Mass Sender Enterprise 2.72

Advanced Email Extractor 2.76

Advanced Mailist Verify 4.2

Mega Mailer 3.1 ru

Email Spider 9.0

Direct Persmail 3.3

Dynamic Mail Pro 3.0.83

Rich Mailer 2.3

DirectMailer 1.6

ÄÍÊ - ðàññûëêà

Mail Browser 1.2

Sendit 1.2

Email Addresses Extractor Pro 3.1

Fast Mailer Pro 3.2

Advanced Email Verify 4.0

Anonym Mailer 3.0

MailSpam New!

EspAnadir Clasific Pro RE 3.0

Pantera 2.07

Pantera BBS 1.5

Submit Wolf Pro 6.02

Cyberboard 1.1

Ifboards 6.1

BoardMaster 2.2

Subman 4.4

Smart Poster 2.35

Press Blaster 4.3

News Poster 5.3

Classify98 1.04

Page Promoter 7.4

Allsubmitter 3.4

AddWeb Website Promoter Pro 8.0.3.8

Internet Business Promoter 9.1

Web CEO 5.6

WebTrafficGuru 3.8

Sky Fox Promotion 2.16

All-in-OneSubmisionToolPlatinum 6.74

FreePromote 2.0

Auto URL Submit 1.6

Web Position Gold 2

AddWeb 6.16 deluxe

Active WebTraffic Pro 4.53

SmileSEOTools

AutoWeb 1.04

DIZsubmit Rus

Submitt Dummy! 3.77

ForumSender 1.3

Forum Poster 1.7

Forum Poster 2.0

Dotmof 1.27

Xrumer 2.9

PHP Spam 3.1

ACe Form Poster 3.6.3

IMCaster ICQ E-Marketer 10.6.12

Fast ICQ Sender 3.0

Master of Deception

The ICQ Message Sender 1.01

Send me ICQ 1.4

Ba!amut ICQ Spider 4.1

C4 Spammer

Mailru Agent Spamer

IcqNews

ICQ Talk

Instamess 2.5

Inflood 1.021

IP2IP





Bonus Content - 419 Scammers Personally

Identifiable Email Address Accounts

suzzywayne@gmail.com

allensmithloanfirm@gmail.com

Tripadvisor@reservation-booking.eu

AnhLePhi@tttcompany.com

betty_wright11@aol.com

HSBC_Auctions_Payments@accountant.com

davemarkins@yahoo.co.uk

crestshipingline@live.com

Guterres-globaldeliveryserivce201@gmail.com

DREAMSEARC@yandex.com

Jaygoldrick@Citizensba-nk.info

INGbankonlineservice@consultant.com

bigelorh@lavc.edu

II-deskfile00@hotmail.com

bensontom12355@yahoo.com

creatureplus@hotmail.com

irishdept@live.hk

hr@addax-uk.com

carl.robert22@yahoo.com

charissajohn993@gmail.com

John_Odlin@outlook.com

hedmonds2@hotmail.com

informationcenter.office007@gmail.com

Fellipemr@globo.com

claudstorm@yahoo.co.uk

info@trutlnandscco.com

info@tynemouth-properties.com

cathrinemurgan@gmail.com

Charlymadsen@gmail.com

info@pchbenefit.com

johnwales9@yahoo.com

haldingj@yahoo.co.uk

Airbnb.Service@homemail.com

Harvey_Williams@mail.com

jhnalmeda@att.net

Evacone23@comcast.net

jimypoomy@live.com

home.emaila@yandex.com

dariusvisher@yahoo.com

Emefiele-godwinemefie12019@gmail.com

Johnson.s.peters@deliveryman.com

daviddioaulpaul@yahoo.com

bestellbestaetigung@amazon-payment-invoice.com

Emefiele-centralbank233@aol.com

cris.leonard@yahoo.com

HerminiolvHerron@gmail.com

Zenonas.Javtokas@mf.vu.lt

cassigriffin3@live.com

jmaree403@gmail.com

Talitha6872@peoples.com

airbnb-host@vipap.me

compensateme_WU@outlook.com

Josephterruso@consultant.com

1014477fl@gmail.com

hooklimited247@gmail.com

infocustommersservice@gmail.com

copprcu@qq.com

davidkuse02@aol.com

info@royalminingcorporation.com

john_alex0237@yahoo.com

hmm.amh@aol.com

jmorris1987@webmail.co.za

Citi-bankcarelineapproveduk@accountant.com

iniedoab1@gmail.com

carolwilcoxlenders@gmail.com

jholder32@shaw.ca

joaovictorandrade@globomail.com

job@jobs.com

AFCU.Customer.Care@usa.com

ingrid.ger332@gmail.com

danielbrown1770@gmail.com

bettyju@rongewunembelast.com

Irer001@yahoo.com

choiyeng754@gmail.com

jessicacole11@outlook.com

Sabine.Zeymer14@gmx.de

Jan.Nechyba@fs.cvut.cz

corlosmaxwell@gmail.com

info@net.com

Wilfred@googlein-de.com

jessicalawal.18@gmai.com

honjrobertsjr426@gmail.com

infodirectcl@fastservice.com

info@rickinvestment.org

Francisjoe12@hotmail.com

Info@advancejob.com

info@softlinkg.com

Beba1008@aol.com

ctouma2@googlemail.com

info_oceanicbakpl@oceanicbk.com

iruemi@outlook.com

isabellaosborne100@gmail.com

benneth.alan@gmail.com

johnallen.75169@yahoo.com

allentayo@yahoo.com

al.macphersonresourece@yahoo.com

hardlarkane@yahoo.com

jessicaphillip86@yahoo.com

hotaling.jason@yahoo.com

jim.ovia1962@gmail.com

helenafox444@gmail.com

aliafelicia2@gmail.com

alens.mark@gmail.com

alicefranklinloanfirm01@gmail.com

james_edward11_13@yahoo.com

claimsdepartment_uk22@hotmail.com

albertmeyerss@outlook.com

international_switzerland2007@yahoo.fr

dasanahjo70@gmail.com

Jamesbestloanfirms@hotmail.com

albert_camron@yahoo.co.uk

brynngood2@aol.com

isaflexx@gmail.com

hmrevenue002@gmail.com

20121122213403.311220@gmx.com

bestsolutionrecruitment@yahoo.it

hilton_roy@yahoo.com

convy0101@gmail.com

secure@real-estate-department.com

irevenueloan@gmail.com

alcorn@vance-brown.com

robertosalvatore362@gmail.com

interfastplus@gmail.com

ron.bullen@aol.com

alinancu30@gmail.com

skylift@net.hr

ryjoan1979@gmail.com

cbn.gov.ng@execs.com

jhughf99@hotmail.com

sessay31@gmail.com

Sheribronstenbofausa@outlook.com

saidarling2g18@gmail.com

setor111@abelharainha.com.br

musafamhh2019@outlook.com

roselara100@gmail.com

sales.misr@hotmail.com

holly_stonfield@yahoo.com

bayamaydin010@gmail.com

john_kehoe3@zing.vn

slmleazer@aol.com

s.william263@hotmail.com

infousa9@gmail.com

contactemail.uba112@aol.com

mg8946380@gmail.com

missestherkoneh1@gmail.com

Noel.Mathias61@outlook.com

len55lenn@gmail.com

infomoneygramtransferworldwidejp@kimo.com

jadesparks1990@gmail.com

issabello64@yahoo.com

dave001pag@gmail.com

harryloanlending@gmail.com

Cynergy.co.uk@mail.com

lara.bridge@immocez.com

royken1010@yahoo.com

jhhdhhgdggd@yahoo.com

benjamin.mason07@yahoo.com

davidchinhnguyen1@gmail.com

landlord116@gmail.com

jeffery_thomas2@aim.com

abdbra01@sify.com

ripoll1986@yahoo.com

info@razatinvestments.com

alice.forrest@pagefinance.org

claudia_castillon@yahoo.com

roteiro@grupoatarde.com.br

onlinebankserviceapproval@gmx.co.uk

henry.dickson75@yahoo.com

Nicky.richard@mail.com

saeedafha@gmail.com

Sarahbaragas@execs.com

rossi.marino17@yahoo.com

maryoveay1000k@gmail.com

amacorresponding@gmail.com

dwwit@hotmail.com

e.heighty@yahoo.com

jessicalawal@yahoo.com

rockafellax@hotmail.com

sales@andonhealthltd.org

drmarylau@gmail.com

emsaircourierservice@gmail.com

claimsdepartment_uk23@hotmail.com

stevewalkerloanservices78@outlook.com

amazon@marketplace-amazon-az.com

mannlarry111@gmail.com

rita_bne@yahoo.com

nnationaleconomiccouncil@indamail.hu

drkhaleali@protonmail.com

sandra_couli1@yahoo.com

micheal30douglas@yahoo.co.uk

earthworld123456789@gmail.com

robertdunal54@aol.com

informationofficer72@yahoo.com.ph

nataliasozzonova@gmail.com

courierfedex@yahoo.cn

kurt.mark8@gmail.com

lamar@weis-builders.com

nicolasbrunker@gmail.com

mrgalaxyloanfirm@gmail.com

lorahsmith8@gmail.com

kovalenelenana@gmail.com

jobs@alertjob.com

directionciccanada@list.ru

estimation1@veracorprinting.com

dominiccaste@live.com

berner@liro-group.com

allenangus1965@gmail.com

mrsstephaniepaterson@gmail.com

LLoydsBank.uk.co@europe.com

lisameghan@rediffmail.com

ryebar@hotmail.com

service@onlinefundtransferterm.com

drpaulvan1960@live.com

m_grace4u@yahoo.com

stella26deng@gmail.com

franknigplc@yahoo.com

eddiejohn31@gmail.com

schallsender1@gmail.com

schenider.heieke19343@gmail.com

scottherrmannynr2@gmail.com

liladacoury@yahoo.com

mrslisabamford33@yahoo.com

robles@weeks-marine.com

semiravelon5@yahoo.com

springsnm@gmail.com

lindarays120@gmail.com

jgfpkl01@gmail.com

martin.harry200@yahoo.com

rosemaryaquino00@gmail.com

nicolastephanus@web.de

cathyfarah123@gmail.com

michelledouglas899@gmail.com

Reine-syvie2020reine@gmail.com

dhpraboe@gmail.com

cadren.jp1955@gmail.com

kraizybee@yahoo.com

rocco@giffels-westpro.com

militaryphonefordeparmy@gmail.com

mr.ibh195@gmail.com

smartmorganssd@gmail.com

ambassadormikebrown@collector.org

kurtmark31@gmail.com

clarkangela999@gmail.com

romanhop900@hotmail.com

alhajiabbaskwe.3743@rediffmail.com

benz230e20019@gmail.com

lopezalicia690@gmail.com

sales.rep0011@gmail.com

matthardy2222@yahoo.com

derwahefrfvk@gmail.com

secretshopper198999@mail.com

alicewetas@yahoo.co.jp

joel.melann@gmail.com

chefdavidburke@chef.net

louisandrew1@outlook.com

donaharry64@gmail.com

alex_smith001@hotmail.com

romashka.l47@yandex.com

officeoffiofficeoofficeoffi@gmail.com

hebrkorn1@gmail.com

canadianontario49@gmail.com

m.serran29@yahoo.com

dogmoore@hotmail.com

officedeptdept@yandex.com

rp7493843@gmail.com

amazon@ethan-e-store.com

stephbreath8@gmail.com

david.walmart@aol.com

j.damien83@yahoo.com

essam_givingthepoor1@yahoo.com.hk

michealaspriggs@outlook.com

cherry.xcity@aol.com

ogmiventures95@gmail.com

jamessmithworks13@aol.com

maita_awori@yahoo.com

samsonmorgan2014@yahoo.com

jameswilliams7722@gmail.com

minebayrental@comcast.net

sijam007@yahoo.com

lora.kent@yahoo.com

easylovex@gmail.com

jamespaul777@yahoo.com

sgtmoranEivis3@gmail.com

nic_danny80@yahoo.com

globalfcc2010@gmail.com

jerrykloubarlyngessan@gmail.com

benjamincolt442@yahoo.com

hakan.r.vet@gmail.com

amishagirl.solomon@gmail.com

dellocatherine515@gmail.com

linda1mashal@yahoo.co.uk

shila.saabira@yahoo.co.uk

Palin-cellphones.ltd.uk@gmail.com

fbiagnet.kelvin001@yahoo.cn

roy999@att.net

rebbaccamurrey@yahoo.com

kuo.mandate72@gmail.com

lane@balfour-beatty.com

garydoylefamily@gmail.com

madonalending@gmail.com

nata.abidi@yahoo.fr

dennisugo2@yahoo.com

claire@bwibank.com

danielluis@onet.pl

saratuben1@att.net

info@perfectpostcourier.com

nikolawil@gmail.com

samuel.kereku@yahoo.com.ph

mr.brian_moynihan@aol.com

phillipsmith9000@gmail.com

ben.swart1313@live.com

Dporterwintrustmortgage@outlook.com

allenmc1411@gmail.com

hgmyjhjhmnfg@yahoo.com

Yoon-jiao_yoon@yahoo.com

jimeleison@live.com

cameroon_interpol.policefoce@outlook.com

dubrowsmithb@yahoo.com

mike.okri1956@yahoo.com

simon_davids@lawyer.com

chadstinson60@yahoo.com

mrdennis.mcdonough@gmail.com

inforedmashal@workmail.com

bentumstephanie@gmail.com

financialbankofafrica@ymail.com

infousbank48@gmail.com

edward@myworldship1.com

gbkafoundation10@gmail.com

miss.vina24@gmail.com

1805225120@qq.com

bertrand_clemence@yahoo.com

kuffornanakwame@yahoo.co.jp

fedexdelivery87@yahoo.ca

andersonpatricia898@gmail.com

sirdave27@yahoo.com

bencally1010@yahoo.com

stacywalker85@outlook.com

conferenceccsde91@gmail.com

Taylor@googlein-de.com

micros2011etfmovq1013ew@rediffmail.com

mr.williamsbright@ymail.com

fjliane@hotmail.com

qureshi-omar@hotmail.com

lucas_keller25@yahoo.com

info@walo-trade.de

mr.camila.sakura@hotmail.com

dennisbrown437@yahoo.com

elbert_hubbard@hotmail.com

sale.ltd@live.co.uk

mr.michaelb@ymail.com

www.microsoftwinni@qq.com

marthawalters65@gmail.com

john.koffi50@yahoo.com

charlesevans041@gmail.com

elenadiegohernandez@gmx.at

thomasarpo@aol.com

deka.de@inbox.lv

matthewcondos1212@gmail.com

steve.evans.011@gmail.com

0318113992@neomail.co.za

jessiebell1k@gmail.com

chad.davis51@yahoo.com

paulettebeal57@yahoo.com

thomasbevin47@gmail.com

rbbmatn4@msn.com

ricksimpsonoilcancercure@gmail.com

mr_robertkelvin@yahoo.com.hk

gma@collector.org

ckoch854@gmail.com

tracymoore_38@yahoo.com

mddcgold@hotmail.com

usdavid7@outlook.com

bankofghanaboa@accountant.com

ppartos@gmail.com

bencarlos2009@yahoo.com

drpastorrichardsmithagent@gmail.com

vanessawilson2003@gmail.com

mrstden0012@gmail.com

sanusi20@live.com

hgordon@bu.edu

maxwilliam002@gmail.com

talk2christain@yahoo.com

jfoxil3@outlook.com

lililorensy@gmail.com

chriswilliam1201@gmail.com

support@uk-couriercompanyltd.com

Teresakendallfamily@hotmail.com

jessicamamuds@aol.com

financialsolution4all@live.com

Sebrin2015@hotmail.com

Smerud.Consultant@outlook.com

lanre_sm@mail.mn

amikoumae00@hotmail.fr

mariyahnada01@outlook.com

nicartmendie2012@yahoo-inc.com

liongateloanfirm452@gmail.com

seyyildiz@yahoo.com

usarmycallunit1@asia.com

gyangauran@gmail.com

elmarbalog@gmail.com

farrahelhash@gmail.com

barrettvin49@hotmail.com

lendingclubx@gmail.com

drseokukma@gmail.com

jessicalauren859@gmail.com

scssoft@live.com

jakdav9@gmail.com

ccvt2011@london.com

tescobank.verifications.co.uk@representative.com

fedexy-ddelivery77@outlook.com

georgemiller2410@gmail.com

millercruz59@gmail.com

jfoxil7@outlook.com

gatesfoundation146@outlook.com

kurohyo_si@yahoo.co.jp

info@gov.ustarb.org

velma.villasenor090@gmail.com

jaksu27az@gmx.com

newproduct2017@gmail.com

davidjames_130@yahoo.com

kyle@navalshore.net

fc074871nig.org@gmail.com

amazon.invoice.co.uk@gmail.com

ferguson.job@att.net

tinpiku@mail.goo.ne.jp

alex.wills@yahoo.com

jonmaclean99@yahoo.com

monica.elton68@gmail.com

officework08@ukr.net

moitrisweriuns@gmail.com

charityloancompanies@mail.com

eleon.loanexpert@cash4u.com

greg701021@yahoo.com

leon@robins-morton.com

familytree04@gmail.com

mknight561960@yahoo.com

atmvisacard33@yahoo.com

smith.juliet76@yahoo.com

customer@airbnb.invoice.de

staffstevewatson@yahoo.com

claimssinc@gmail.com

benjoycel1809@gmail.com

browndenewsin@yahoo.com

steil.871@superposta.com

paychecksecure002@gmail.com

danwade1966@yahoo.com

azamaracrewstaff@bowl.com.au

jkgoldberg161@yahoo.com

mailoffice1f@yahoo.co.jp

stevealex009@gmail.com

odapo055@gmail.com

princerassaqrasmane20@gmail.com

danny.lewis101@yahoo.com

ballot@silversandcasino.com

katejobe29@yahoo.com

lexxjones2016@gmail.com

equitoriainvestments@gmail.com

roseveltkilson@gmail.com

lisab2175@gmail.com

tellbod.cbn.gov.ng@gmail.com

sjohnjennifer@gmail.com

barryjohnrichards0@gmail.com

tescobank_veriffication.co.uk@fastservice.com

craigrita682@gmail.com

lutz_nicole@yahoo.co.uk

paulwalterloanlender@9.cn

moore.williams870@yahoo.com.vn

mrjonatan@ibibo.com

amanda33es@gmail.com

tassyand1@yahoo.com

audreyterkson1999@gmail.com

kent_mary@ymail.com

philip0911culbert@outlook.com

ppuli8708@gmail.com

ericrutherford123@hotmail.com

georgeagnes65@yahoo.com

info@safewaytradingllc.net

dvmoore75@hotmail.com

radmoredebbie@yahoo.com

j.will97@yahoo.com

dustinkruse45@gmail.com

auto-confirm@amazon-payments-europe.com

al470046@gmail.com

santiagodavidsonn@gmail.com

contact@bkpbank.net

bestellbestaetigung@seller-central-amazon.de

kodsupplies@hotmail.com

smallingmcklin@yahoo.com

infos.qatarfinancialinvestment@gmail.com

contact@airbnb-post.com

robson.law@lawyer.com

rubenjim313@gmail.com

mbiamartha@yahoo.com

droses1993@gmail.com

garymark10@gmail.com

employclients@consultant.com

terrygavin27@yahoo.com

WoltersHelena@outlook.de

chanchaidang@shellsthailand.com

fatimaabdel324@hotmail.com

estherlove756@gmail.com

support@invoice-airbnb.com

fishadio101@gmail.com

micheal0976@yahoo.com

officially@blumail.org

lovemama0k1@gmail.com

meganreed12@gmail.com

inspiredcapitalplc@gmail.com

alices72281@gmx.com

diafd92@comcast.net

therrien.manon33@aol.com

cottageallan@gmail.com

mrmuazzam.abbas01@gmail.com

madisonmayle00@outlook.com

allen4violetlarge@gmail.com

marieyvonnedominique@hotmail.fr

parisglori@gmail.com

sliverdickson@yahoo.com

barbrahelina@gmail.com

anthoniobander@yahoo.com

philipcraig04@gmail.com

robinsonewelem61ts@outlook.com

umondiaalex101@gmail.com

marketloanltdmontagecapital@yahoo.com

efcc2780operate@gmail.com

hilmawilhe1lm@mail2world.com

aefhbv.financiero@hotmail.com

starlikestar@yahoo.co.jp

Iranianoil.company_UK.Ltd@consultant.com

engrockbenz@gmail.com

beller_william@yahoo.com

nathanrlundrigan@gmail.com

sesamorava@gmail.com

carolynlande090@hotmail.com

quickleapinvestment@yahoo.co.za

joy01love@gmail.com

swiss554@swiss558.onmicrosoft.com

philipsaunders77@yahoo.com

janetmark125@gmail.com

M.Hollenbeck@yahoo.com

jangonhpanpam@aol.com

terry_skender101@yahoo.com

noramabou@att.net

pamgells@yahoo.co.jp

robertcooker110@gmail.com

ms_akin41@yahoo.com

diplomatmarkwilfred2021@aol.com

geokonta01@yahoo.com

symbiosis_admissions2@yahoo.com

capt.patrickwilliams44@yandex.com

bensondonald56@yahoo.com

imfalerts@yahoo.co.jp

charitywhitefinancialfirm@gmail.com

support@order-a-z-amazon.com

bestbuytrade@hotmail.com

bezulich@gmail.com

garygarnese@yahoo.com

dianasmith57274@gmail.com

officecarmanlap@yahoo.com

priscillakehm@yahoo.com

fedexdelivery919@aim.com

kenmadiba201@gmail.com

ingbankcustomer@accountant.com

usps.courierservice@post.com

Citychoiceapartment@gmail.com

mercylove34@yahoo.co.uk

cythiajackson4040@gmail.com

robertcomes45@yahoo.com

mikebarry52@yahoo.com

info.johnkennedyinvestment@gmail.com

Test@grandprixhotel.fr

josyarman@dr.com

jamescarter976@yahoo.com

kevinmcus@gmail.com

amazon-payments-europe@bestellenbestatigung.com

safa-fifasupport2010za@gala.net

amina.zanini1@live.com

anderobertrson@gmail.com

mayerfelicia@gmail.com

r.b.c.gerarddolan1@outlook.com

greg_fox@hotmail.com.au

phillip_pollard@yahoo.com

stacey4real1717@yahoo.com

tam98hica@gmail.com

pratapranjit3@gmail.com

georgebrown19976@gmail.com

fanvfk.moritte2005@gmail.com

info.londonleytonhotel@yahoo.co.uk

mikejonesfc@hotmail.com

jpb25848@email.vccs.edu

kellysanchez3542@gmail.com

selimhamaz1975@hotmail.com

samueladjei4040@gmail.com

muhammadubuha2015@yahoo.com

miracle0286adum@yahoo.com

hillsfrank96@yahoo.co.uk

ekaterinarefined@yahoo.com

mkierscasmes@gmail.com

rayynob@yahoo.com

luluevans300@protonmail.com

ukservice_hsbcbank0015@englandmail.com

henryne1277@gmail.com

accdpt0101@outlook.com

cbrenda191@gmail.com

larryellisonfinance@cosmotemail.gr

vasselchris@rocketmail.com

scherr@swinerton-builders.com

nelsonramos2009@msn.com

unfoffice_london@mail2english.com

mainframeloaninvestment@gmail.com

impexhr1@gmail.com

theusmilitary@hotmail.com

crosspaycenter1@outlook.com

multip.funitures@rocketmail.com

officefilemail22@gmail.com
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markedwardmanager@gmail.com

paulanderson0009@gmail.com

stevenickell20@gmail.com

claim-department@firstactives.com

jamesbright@virgilio.it

fl_jacob@yahoo.com

s.rosenwasser@yahoo.com

federalreservebank2003@gmail.com

mic.joseph81@gmail.com

filligreeza@gmail.com

gabby.kumah@yahoo.com

caprisone.finance@gmail.com

stevenmark1886@tlen.pl

k.minnis.hr@gmail.com

claimsresolutions.ndicg@gmail.com

terryw_ood@yahoo.co.uk

ayda7905megraw@hotmail.com

billywrightt31@aol.com

709juehihuska870@tomica.ru

nicep50@yahoo.com

mr.rcruz2020@gmail.com

parkmasunji88@gmail.com

garciajames121@yahoo.com

cinderellamarcoy@gmail.com

DepositGuard-Transaccion@europe.com

lardonmahtieu@outlook.com

bleckslem@yahoo.com

lindotf5793@yahoo.com

jornagy@yahoo.com

info.jameswalker58@gmail.com

Bardexoilgas@yahoo.co.uk

lindagodwin867@yahoo.com

burr@robins-morton.com

teracopper@gmail.com

bridgetadjei59@outlook.com

gneil8899@gmail.com

smithadamson21@yahoo.com

firstbankloancompany@gmail.com

fundbenefit632@gmail.com

daligan_br@hotmail.com

wloalbert@gmail.com

terry.dagogo05@gmail.com

justinluis1oo1@gmail.com

info.credit101@gmail.com

lyndsybones@blumail.org

kirraleecochrane11@gmail.com

REQUIREMENT-sanimohammedx2@yahoo.com

sales@goodukoffers.co.uk

info@jgh.co.in

mariangela.booker48@gmail.com

Employmentforyou01@live.com

jenny.spence4@gmail.com

rkendel4@gmail.com

hagmaierro@hotmail.com

www.fbi.gov.12@outlook.com

william.yun312@gmail.com

boydlisa79@yahoo.com

gmccanninvest020@gmail.com

airbnb-inc@fastservice.com

david.lyon116@gmail.com

smithieadr@gmail.com

frank.stewart94@yahoo.com

kakalaya110@gmail.com

messisteve7@gmail.com

info.carouselconsultancyltd@yahoo.com

godsentloanservice1@gmail.com

smithstev61a@gmail.com

roycornell@yahoo.com

ralphlucas@blumail.org

timothymorganjr1957@gmail.com

debellopeter9@gmail.com

hanacananska@yandex.com

12es12@w.cn

goditilavita@azet.sk

hamilton_ellisloanfirm@mit.tc

davidbricks50@gmail.com

airbnbexpress@tech-center.com

sabina_bello2000@voila.fr

airbnb@lt-rentals.com

mariaredd10@hotmail.com

reward@facebookonlinereward.com

anne@cityleases.info

randyromatichrt@yahoo.com

mallproductltd@aol.com

hangcornezi@yandex.com

career@bakardsubsea.com

danieljohnson20017@gmail.com

luisforest50@gmail.com

tijaniahmedbastawy111@yahoo.com.hk

space60monsterr@gmail.com

johnalbert19@msn.com

ALKALLI-usmanakali2020@gmail.com

luisahoff20@gmail.com

bale@giffels-westpro.com

airbnb@ltr-departament.com

smithadams34@gmail.com

soniaseaman@yahoo.co.uk

goagle.financial.department@live.com

radkaholka@gmail.com

grosvenorfinancelimited@gmail.com

AlfiDavids@yahoo.com

williamsmithloancompany119@gmail.com

calebcalvert16@gmail.com

kimberlyjackson5080@yahoo.com

greatmanofvalour@comcast.net

barristerpaulokon1@gmail.com

lituhabla@yandex.com

jenniferawa10@yahoo.com

maxwellhelseth@gmail.com

anonymous2011@mail-on.us

jumvea_jpnusedcars@live.com

frankhood820@yahoo.com

support@customers-airborneexpress.com

kurzeneva_olga@mail.ru

larryscort6@gmail.com

happy02_207@yahoo.com

williamhill259@yahoo.com

williamsloaningcompany@gmail.com

katjaronchin@gmail.com

jenniferlove1535@yahoo.com

blaze.steven@yahoo.com

lucy@btplus.co.uk

info@astomosuae.com

capitalgroup9@aol.com

bamck56521@gmail.com

d_lee385@aol.com

dbrooks774@yahoo.com

jo_business@hotmail.com

fund_finance@yahoo.com

larryg9@verizon.net

billy.richard900@yahoo.com

rob.lasko@mail.com

williampelham.bar@gmail.com

backofenm@yahoo.com.hk

francisco1f@live.com

marysmith199990@gmail.com

dannisharelloanlender@yandex.com

richardclifford890@yahoo.com

kosvid1982@gmail.com

ritayywerner@gmail.com

mary_apia82@yahoo.de

johnalex2468@hotmail.com

r7.sahli@gmail.com

katy_anderson1@aim.com

d_mallow@blumail.org

greatgift@hotmail.co.uk

larrymathew0@gmail.com

thomasfred111@yahoo.com

francisco_perez17@aol.com

solomonmark@natwestbankplc.com

Airbnb.Booking.Service@europe.com

dalegrant290@hotmail.co.uk

tobiaadrian@aol.com

AndrewAlessio32@yahoo.com

stevewaynoil4@gmail.com

kheui36351@att.net

roys.adams001@gmail.com

kiminvestmentltd00@gmail.com

h0lmes@mail.com

maryadonteng18@gmail.com

toddring00188@gmail.com

lawrencelarbi9@gmail.com

gregfox@hotmail.com.au

lee_waynefamily@hotmail.com

kingsapts1@gmail.com

williamdonaldxxx@gmail.com

rhodasandra22@gmail.com

info.wcpvaw@aol.co.uk

markoilbusiness@yahoo.com

stevewilliams1203@hotmail.com

cameron-scott1@live.com

lanceloanfirm234@gmail.com

auto-confirm@amazon-orders-protection.com

smithwalter111111111@gmail.com

lisickamilada@gmail.com

williamyun46@gmail.com

barrmarklewis13@gmail.com

smtpaul555@gmail.com

koffilaurent@live.fr

fenellomarthins6268@gmail.com

info.bank19@gmail.com

butler.george.144@gmail.com

davemiller231@yahoo.com

hassababy1@att.net

info.djohnson00@gmail.com

brayloancompany11@gmail.com

briairwaysworldcargo@live.com

psimons2010@yahoo.com.hk

suchorska.marlena85@gmail.com

lukas0petersen@inbox.lv

infolotto@jefferydean.com

danielrigsby@rocketmail.com

graciouslymade001@yahoo.com

mercyrube20@gmail.com

barings.wealthmanagement@yahoo.com

crafsmith3444@gmail.com

aharon@oltmans-construction.com

support@dco-transport.eu

revnicholasaka666@gmail.com

008aisha008@att.net

zenithbankplc0055@gmail.com

booksinsurancefirm@gmail.com

mariobotticelli.it@gmail.com

mcmahonkell00@yahoo.com

williscott61@gmail.com

bryanmorgan400@gmail.com

lindamorison.011@gmail.com

info@gulfinseci.com

barrjamesshaka0@gmail.com

kh-vdc1@vdc.com.vn

josephineparker063@gmail.com

flroa1214@msn.com

remittancepaymentunit014@gmail.com

w.asare@yahoo.com

latestupdate1@gmail.com

goodlovely000@gmail.com

ddiamondbroadfinanceloan@gmail.com

larryhufty0@gmail.com

davidhenry78@yahoo.com

markhopkinsconsult@gmail.com

tmlucas8@skymail.mn

billroger21@yahoo.com

lynnchipmandonna10@yahoo.com

karim.balde123@gmail.com

teresakemper2016@gmail.com

mgcorporates@gmail.com

davidfoster1117@yahoo.com

richardmorris_at01@videobank.it

david.booth13@gmail.com

frankanderson1759@gmx.com

bonillafranklin713@gmail.com

suliatmabou72@yahoo.com

sullivan_johnson105@yahoo.com

luanabarbosia@hotmail.com

lupiller@tin.it

jonesdavid118@yahoo.com

info@portomaua.rs.gov.br

mary_robert022@yahoo.co.jp

john.wilson30@ymail.com

jacobjacobs45@gmail.com

bar4863@gmail.com

jamsmith19@yahoo.com

mbighope@yahoo.com

captpatrickwilliams60@gmail.com

cityfinancialservice30@gmail.com

inc.globaltrade@yahoo.ca

stu_olson@yahoo.com

info@designgateway.net

mclittle_1@outlook.com

joannacolesarmy77@gmail.com

masssende5566@gmail.com

johnashby124@gmail.com

barkerjob106@gmail.com

Brandon@claimoffice.org

financialtaskforce@minister.com

gomoagoldforsale@gmail.com

briannagraysonloanf@gmail.com

irina.nek217@gmail.com

capt.johnsonmichael@yahoo.com

johngava88@gmail.com

ajagu1990@gmail.com

michael.bloomberg51@gmail.com

sunita.raja1981@gmail.com

brucemoulton93@yahoo.com

marlenewillis88@gmail.com

barrsterhighcommision1@qatar.io

stoutantonio@gmail.com

storesstores27@yahoo.co.uk

bradleygolan57@yahoo.com

maybegoodlifee@gmail.com

mark.henry2011@sify.com

maureenkayumba31@yahoo.com

marrio.cimarro1@gmail.com

mark.otti100@gmail.com

ginahaspel562@gmail.com

jm_feng@yahoo.com.cn

frankbenson101@outlook.com

sulzercompanyltd@gmail.com

barrettrico2000@gmail.com

brightgirlsummer@ya.ru

williamjo52@yahoo.com

tescemasjeehhjsyrstyus@opentechgr.com.br

billing@checkout-cgi3-notification.com

mark707pedro@yahoo.com.hk

michaelbinder23@outlook.com

Brittneydesk@yahoo.com

mark_jones16@yahoo.com

martbrown2017@gmail.com

wolffa86@yahoo.com

terry.edward67@yahoo.com

markchiuhang@ymail.com

swan.kyle101@gmail.com





sonywon1@yahoo.com

williamjones_loanlenders@hotmail.com

alexandrualin32@yahoo.com

info.privatecompanyphc@gmail.com

airbnb-hosts@house-flats.com

melissahannah1992@gmail.com

info@hansonlimited.com

mgeneralmusa@yahoo.com.ph

methanyt@yahoo.com

Brucejames2034@gmail.com

aishaalqaddafi2@gmail.com

info@yahoo.co.th

fredgoodman1976@gmail.com

zpaki502@msn.com

barlowwilliams474@yahoo.com

umumohammed85@gmail.com

firstladyoffice@aol.com

wlsnwilliams939@hotmail.com

michael.shuman@minister.com

john_kumoh2003@yahoo.co.jp

fitzerjames@yahoo.com

azimdirira@gmail.com

shinamoor@yahoo.com

frankrivera820@aol.com

markjones0111@gmail.com

michael.labox@yahoo.com

williamdraw978@gmail.com

sales@wexonix.com

g.shaughnessy@gmail.com

eddie_mrb@yahoo.com

lovelyhumu854@gmail.com

hassanusman10ng@yahoo.com

grahmmillerfredick@gmail.com

josephrichard749@gmail.com

liliandesmond221@yahoo.in

ashley.wendy@rocketmail.com

Bonus Content - Cyber Jihadist's Personally

Identifiable Email Address Accounts

yunding5568@163.com

redaksi_si@yahoo.com

cancnebut@gmail.com

tbg17888@gmail.com

neharikarai@outlook.com

xpj09166@gmail.com

ahmed.alqassam@gmail.com

abumos3b33@hotmail.com

iali3g@gmail.com

tevhididavetcom@gmail.com

zayizef@gmail.com

kinyongof12@gmail.com

jo9277547316@gmail.com

kokludegisimmedya@gmail.com

sitenevic@gmail.com

NAMEMONITORS34@OUTLOOK.COM

johnlassandro@hotmail.com

3422926751@qq.com

4dm1nhizb@gmail.com

tkaydesigns@hotmail.co.uk

turkhackteamiletisim@gmail.com

VANILLAHOLDINGS@GMAIL.COM

doenfahri@gmail.com

bestselection@gmail.com

hostdem@gmail.com

kandaharimama@gmail.com

islamdin1@nasimke.ru

salammedia2011@yahoo.com

awad@zadgroup.net

domainmanagers@outlook.com

Sarah@kcicom.com

txgals50@aol.com

cdlr@cdlr.net

aktivera@flighton.se

5292086@qq.com

adilmadani@yahoo.com

shutdown2022@gmail.com

FURAAT4@HOTMAIL.COM

khelafa2000@yahoo.com

support@ghaaly.com

love@qiaomi.com

yboss455@yahoo.co.jp

akuatekbilisim@gmail.com

samirnet2@gmail.com

keywordacquisitions@gmail.com

alkantar@thisiscyberia.com

forgetmenot1343@yahoo.com

hosting.dedearif@gmail.com

kevin.cyber.base@gmail.com

whoisprotectionservice@gmail.com

koool123@live.co.uk

DAKHEEL123@GMAIL.COM

2085553878@qq.com

ishaq@islamicsupremecouncil.org

VD@NYM.HUSH.COM

RCASPER76@YAHOO.COM

darultavhid@mail.md

kamkashem@gmail.com

brett.evans@icloud.com

tevhiddergisi@gmail.com

bluetextmama@gmail.com

alfetn2004@gmail.com

akuedris@gmail.com

money_detailsiai@yahoo.com

yusufestes@msn.com

fkummah@hotmail.co.uk

janeverno@gmail.com

vwinlucky@gmail.com

milen.radumilo@gmail.com

zoooom2025@gmail.com

abdullah.fahed@gmail.com

abdvvv@gmail.com

2628342@gmail.com

iraqipanet88@gmail.com

muhammadhurayra@gmail.com

aulia_suwandi@yahoo.com

kilickaya.i@gmail.com

kenta.yano831@gmail.com

abine.mariyah@yahoo.com

mailusamah@gmail.com

fad.lee@hotmail.com

wardak14794@yahoo.com

info@cyberkov.com

rk2387927@mail.com

domkeeper777@gmail.com

RUSELBIEV@GMAIL.COM

intercostltd@gmail.com

khamenai@hotmail.com

rk2387927@gmail.com

jim_7788@tom.com

admin@compubyte.vg

net1001.net@gmail.com

PQY@HOTMAIL.COM

homjea@163.com

mohalfares@gmail.com

cyberkov@nym.hush.com

abuabdou.mohammed@gmail.com

info@exposurepdp.com.au

elmanara@gmail.com

hydomains@yandex.com

tsuyama@sparkle-ark.co.jp

hizbuttahrirmedia@gmail.com

tevhidigundem01@gmail.com

al_jarba@yahoo.com

tariqghazniwal@yahoo.com

ed@albawaba.com

2028403301@qq.com

bijankani@gmail.com

puissance-group@yandex.ua

milenradumilo@gmail.com

info.bj@gmail.com

ALITEAIB@GMAIL.COM

HTM.ITTECH@GMAIL.COM

mawaqe3@gmail.com

naeemchaudhry@hotmail.com

gt3030@yahoo.com

SAAID@ALODA.ORG

9235365@GMAIL.COM

aa999nn@hotmail.com

alsamedon@yahoo.com

juturna_alaska@hotmail.com

lic210826@gmail.com

crywole1@yahoo.com

dougsanders1070@gmail.com

834174739@qq.com

dvlpmntltd@gmail.com

aalmaree@gmail.com

almubarak@hotmail.co.uk

Faily1929@cheerful.com

info@bengisu.com.tr

SSSAS_66@YAHOO.COM

hataya.hachi@gmail.com

souh@mail.com

289626@hush.sc

hpsoro@yahoo.com

wins_ku@yahoo.com

bf1@sitematrix.com

abdulkerimeski@hotmail.com

charlie_elias@yahoo.com.au

salahuddinvc@hotmail.com

adoaenlg@yahoo.co.jp

jose29@gmail.com





fad.lee@yahoo.com

basomidi@gmail.com

rafatkatta@gsibc.net

albaylsan@gmail.com

eng.rimawi@gmail.com

omori@sakejapan.com

ml-link@ioix.com

maherzain.0071@gmail.com

shiaweb2@yahoo.com

gulf1001@yahoo.com

249442918@qq.com

shenxingyu888@outlook.com

wobuyaoqiand@163.com

hizb.russia@gmail.com

Bonus Content - A Compilation of

Cybercrime-Friendly Forum Communities

http://www.0day.su/

http://www.0daytransfers.com/

http://www.0websecurity.ir/

http://www.0wn3d.su/

http://www.0x00sec.org/

http://www.0xtv.biz/

http://www.10neen.com/

http://www.10tl.net/

http://www.110hack.com/

http://www.11wang.org/

http://www.176ku.com/

http://www.1923turk.org/

http://www.1cyberteam.com/

http://www.1forum.biz/

http://www.2cto.com/

http://www.2kcreatydoneqybu.onion/

http://www.2or24opd2hkebadv.onion/

http://www.365cmd.com/

http://www.365master.com/

http://www.3bb.ru/

http://www.3est.com/

http://www.3rdworld.cc/

http://www.3xforum.ro/

http://www.3xp1r3.com/

http://www.3xpl0itforums.tk/

http://www.4sectors.com/

http://www.4sell.su/

http://www.52pojie.cn/

http://www.54xyzy.com/

http://www.552egj2iappsjjdu.onion/

http://62lpxb2lt3yt6vgr.onion.to/

http://www.77169.com/

http://www.7olm.org/

http://www.a.nf/

http://www.accessroot.com/

http://www.accvip.net/

http://www.acedhacks.com/

http://www.acehackers.com/

http://www.acessoseguro.org/

http://act-crew.indonesianforum.net/

http://www.actarnetwork.com/

http://www.afera.li/

http://www.ahteam.org/

http://www.aiocrack.com/

http://www.aiw.bz/

http://www.ajanlar.org/

http://www.akinci-crew.com/

http://www.aktivizler.com/

http://www.al-mojaheden.com/

http://www.al-warez.org/

http://albhack.ucoz.org/

http://www.alfahack.com/

http://www.aljyyosh.com/

http://www.alkrsan.net/

http://www.alligator.cash/

http://www.alm3refh.com/

http://www.alpha-accz.info/

http://www.alphadark.club/

http://www.alsancaktim.com/

http://www.altahack.com/

http://www.altenen.com/

http://www.altenen.nz/

http://www.amazedzone.com/

http://www.amezingcarders.com/

http://www.anarchie.biz/

http://www.andhrahackers.com/

http://www.anon-hack.ru/

http://www.anon-team.xyz/

http://www.anonclan-stresser.net/

http://www.anonimosx.ws/

http://www.anonymous-forum.de/

http://www.anonymous-team.com/

http://www.anthrax.cc/

http://www.anti-armenia.org/

http://www.anti-intruders.org/

http://www.antionline.com/

http://www.antisecurityteam.com/

http://www.antiwhitehat.com/

http://www.aoreteam.com/

http://www.apexxbboaqnsduxx.onion/

http://www.ar-sup.com/

http://www.arabdmo.com/

http://www.arb-point.com/

http://www.arch3rsecgjqcmjb.onion/

http://www.arenatech.ro/

http://www.arhack.net/

http://www.aria-security.com/

http://www.armada.la/

http://www.armyforum.xyz/

http://www.art-tuto.eu/

http://www.asdely.net/

http://www.ashacks.ru/

http://www.ashiyane.org/

http://www.astalavista.com/

http://www.at4re.com/

http://www.atghc.net/

http://www.atlantis.cx/

http://www.attacker-team.org/

http://www.ax0nes.com/

http://www.az-khaos.com/

http://www.az-security.org/

http://www.az4rum.com/

http://www.azirus.fr/

http://www.b-at-s.info/

http://www.b3yaz.org/

http://www.bablomet.org/

http://www.back2hack.cc/

http://www.back2hack.net/

http://www.back2roots.su/

http://www.backdoorshk.tk/

http://www.backspacez.us/

http://www.badzone.org/

http://www.baida-network.net/

http://www.balicoder.org/

http://bbs.bearcome.com/

http://bbs.ccidnet.com/

http://bbs.chnsuc.com/

http://bbs.fankebase.com/

http://bbs.hackav.com/

http://bbs.hackbase.com/

http://bbs.hackline.net/

http://bbs.hmw.name/

http://bbs.iceinternet.cn/

http://bbs.isbase.net/

http://bbs.jiasule.com/

http://bbs.kafan.cn/

http://bbs.nohack.me/

http://bbs.pediy.com/

http://bbs.silic.wiki/

http://www.bdf-club.cc/

http://bedgehackersforum.runboard.com/

http://www.belegit.org/

http://www.bestblackhatforum.com/

http://www.beyeugroup.systems/

http://www.bg-worm.com/

http://www.bgworm.com/

http://www.bhell.org/

http://www.bhf.io/

http://www.bighack.ru/

http://www.biglan.ru/

http://www.bilzerian247.com/

http://www.bin.ms/

http://www.binrev.com/

http://www.bit-team.com/

http://www.bitbiz.cc/

http://www.bitch.agency/

http://www.bitcoinclub.cc/

http://www.bitshacking.com/

http://www.bl3ckmarket.org/

http://bl4ck-p0rtal.com.ar/

http://www.bl4ckhatsecurity.net/

http://www.black-c0de.org/

http://www.black-forums.net/

http://www.black-hack-carding.ml/

http://www.black-hat.net/

http://www.black-hg.org/

http://www.black-shades.net/

http://www.black-ships.net/

http://www.black-zone.biz/

http://www.blackbay.org/

http://www.blackbiz.info/

http://www.blackcode.in/

http://www.blackcoding.pro/

http://www.blackcvv.co/

http://blackhack.xoo.it/

http://www.blackhacker.ru/

http://blackhackers.rzb.ir/

http://www.blackhackerz.org/

http://www.blackhat-activities.com/

http://www.blackhat-germany.biz/

http://www.blackhat.al/

http://www.blackhat.community/

http://www.blackhat.ooo/

http://www.blackhatboard.com/

http://www.blackhatchina.com/

http://www.blackhatcorp.com/

http://www.blackhatcracks.com/

http://www.blackhatleaks.com/

http://www.blackhatmafia.com/

http://www.blackhatmoneymaker.com/

http://www.blackhatprotools.info/

http://www.blackhatscene.com/

http://www.blackhatsem.com/

http://www.blackhatseocommunity.com/

http://www.blackhatspot.net/

http://www.blackhatteam.com/

http://www.blackhatworld.com/
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http://www.sa-hacker.com/

http://www.sa-sec.org/

http://www.sa3eka.com/

http://www.sabotaj.net/

http://sadxforum.freeforums.org/

http://www.safecoders.com/

http://www.safeskyhacks.com/

http://www.sahnescript.eu/

http://www.sbhacker.net/

http://www.scarder.in/

http://www.scene-sector.biz/

http://www.scenepolizei.org/

http://www.school-hack.net/

http://www.school-of-hack.net/

http://www.schwarzmarkt.in/

http://www.sdly.org/

http://www.se-king.net/

http://www.se-te.com/

http://www.sec-advisor.org/

http://www.sec-ar.net/

http://www.sec-gaza.net/

http://www.sec4all.org/

http://www.sec4ever.com/

http://www.secnull.cc/

http://www.secondlevel.in/

http://www.secret-fraud.cc/

http://www.secret-level.org/

http://www.secret-zone.net/

http://www.secunet.cc/

http://www.securecall.club/

http://www.security-portal.cz/

http://www.security-talk.info/

http://www.security-teams.net/

http://www.security-tr.com/

http://www.security7.ir/

http://www.securityc0de.com/

http://www.securitylab.ru/

http://www.securityonline.info/

http://www.securityoversight.net/

http://www.securityxploded.com/

http://www.secworm.net/

http://www.secz0ne.su/

http://www.sentry.mba/

http://www.seo-forum.ru/

http://www.seoblackhat.com/

http://www.sepehr-team.org/

http://www.serious.cm/

http://www.serious.to/

http://www.sewate.net/

http://www.shabgard.org/

http://www.shadowcarders.com/

http://www.shadowmarket.vip/

http://www.shadowmart.ru/

http://www.sharp-cyber.com/

http://www.shell2me.com/

http://www.shellsec.pw/

http://www.shishe.in/

http://www.shopworld.biz/

http://shqipet-hack.do.am/

http://www.siberaskerler.com/

http://www.siberfrm.net/

http://www.sidoarjocyber.net/

http://www.sifreciler.org/

http://www.silenthackers.com/

http://www.silver-team.net/

http://www.silverhackteam.org/

http://www.silverspam.net/

http://www.sinfulforums.net/

http://www.sinfulsite.com/

http://www.sinhvienit.net/

http://www.sinister.ly/

http://www.siphondkh34l5vki.onion/

http://www.siriusforum.com/

http://www.siyah.co/

http://www.siyahport.com/

http://www.skapadmin.net/

http://www.skiddie.org/

http://www.skidhacker.com/

http://www.sky-carders.ml/

http://www.sky-fraud.ru/

http://sla.ckers.org/

http://www.sliv4ik.ru/

http://www.smarthackerz.com/

http://www.smilegroup.pro/

http://www.smtpandexploit.com/

http://snd.astalavista.ms/

http://www.snipr.gg/

http://www.soci0patx11.zone/

http://www.socialengineered.net/

http://www.socialengineeringforums.com/

http://www.socialware.ru/

http://www.socialxak.ru/

http://www.soldierx.com/

http://www.sonkatliam.com/

http://www.soom.cz/

http://www.spaceme.pro/

http://www.specialcarders.com/

http://www.specters.org/

http://www.spisok-kidal.ru/

http://sploit96-node.rf.gd/

http://www.sploit96.ga/

http://www.spyhackerz.org/

http://www.spyhatz.com/

http://www.spytr.net/

http://www.spyturk.com/

http://www.spyworm.de/

http://www.sqebd.com/

http://srabb3r-node.rf.gd/

http://www.sridigitalforums.com/

http://www.ssn24.me/

http://www.ssndob.org/

http://www.stardumps24.com/

http://www.stf.st/

http://www.strangers.cc/

http://www.stresserforums.me/

http://www.strime-hack.ovh/

http://www.styxnet.pw/

http://www.sub-7.net/

http://submitdefacercrew.web.id/

http://www.surabayablackhat.org/

http://www.suspicious.cc/

http://www.swaghackers.net/

http://www.sy-team.com/

http://www.sysadmins.ru/

http://system-group.com.ar/

http://www.systemhackers.net/

http://www.szenebox.org/

http://www.t00ls.net/

http://www.tahribat.com/

http://www.takecommand.in/

http://www.talismanrestz7mr.onion/

http://tasikcyber.or.id/

http://www.tbd.my/

http://www.tbo-security.net/

http://www.tcbr.us/

http://www.tdhack.com/

http://www.team-crackers.ro/

http://www.team-madalf.com/

http://www.team-rept.com/

http://www.team-world.net/

http://www.team-xpc.com/

http://www.team3lit3.net/

http://www.teamgreyhat.com/

http://www.teamxpc.com/

http://www.tech-forum.ch/

http://www.teknodestekteam.com/

http://www.tenec.cc/

http://www.teraexe.com/

http://www.tgsforum.in/

http://www.th3-0utl4ws.com/

http://www.th3xploiterz.com/

http://www.thaishadow.com/

http://www.thc-crew.net/

http://www.theblackdeck.net/

http://www.thebot.net/

http://www.thebotnet.com/

http://www.thebusinessclub.su/

http://www.thecardermethod.com/

http://www.thecardingforum.com/

http://theelit3s.co.uk/

http://www.thefathers.pro/

http://www.thefinalstring.com/

http://www.thegioingam.org/

http://www.thehackersbay.org/

http://www.thehackingcenter.com/

http://www.thehackspace.org/

http://www.thel33ts.com/

http://www.theplug45.am/

http://www.theworldisyours.biz/

http://www.thieves-team.com/

http://www.thieves.co/

http://www.thispaddedcell.com/

http://tiger-attack.forumotion.in/

http://www.tmskhzavkycdupbr.onion/

http://www.tnctr.com/

http://www.tolur.org/

http://www.tonel.org/

http://www.toolba.se/

http://www.toolzbox.cc/

http://www.tooolz-db.com/

http://www.top-carders.ru/

http://www.top-obnal.su/

http://www.top90da.com/

http://www.tophope.ru/

http://www.topleakers.com/

http://www.toptipstricks.com/

http://www.totalblackhat.net/

http://www.toxic0de.net/

http://www.toxyzen.ru/

http://www.trading-network.to/

http://www.tradingcenter.biz/

http://www.trialanet.com/

http://www.trickforums.net/

http://www.tricksplacess.net/

http://www.trojanforge.co/

http://www.trollerteam.com/

http://www.troyhack.xyz/

http://www.trteam.net/

http://www.true-carders.com/

http://www.truecarders.se/

http://www.truehack.net/

http://www.truehackers.ru/

http://www.tryag.cc/

http://www.tsattack.com/

http://www.tsrh.ws/

http://www.turkblackhats.com/

http://www.turkcrew.info/

http://www.turkeysecurity.biz/

http://www.turkhacks.com/

http://www.turkhackteam.net/

http://www.turkishack.com/

http://www.turkishajan.com/

http://www.turkishsecurity.org/

http://www.turkishteam.in/

http://www.turkiyex6fkt46ra.onion/

http://www.turkleech.net/

http://www.turksanalkuvvetleri.com/

http://www.turksiberguvenlik.net/

http://www.turksiberkonseyi.com/

http://www.turkteam.info/

http://www.turkworm.com/

http://www.turkz.org/

http://www.tuts4you.com/

http://www.tutweb.pw/

http://www.tux-family.com/

http://www.tuxedocrew.biz/

http://u.nydus.org/

http://www.ub3rhackers.com/

http://www.uberhacking.net/

http://www.ubers.org/

http://www.ucnp.net/

http://www.ufolabs.net/

http://www.ug-asia.org/

http://www.ugworld.biz/

http://www.ultimatenetwork.ru/

http://www.ultuifii.info/

http://www.underc0de.org/

http://www.undercover.su/

http://underground.org.mx/

http://www.underground.ws/

http://undergroundhacking.darkbb.com/

http://www.underplace.biz/

http://www.undersec.info/

http://www.undersecurity.net/

http://www.undetecter.org/

http://www.union-district.cc/

http://www.unionpay.pro/

http://www.uniquecrew.net/

http://www.unity-soft.org/

http://www.unityfinxomxhf73.onion/

http://www.unityforum.xyz/

http://universalforums.co.cc/

http://www.unleashedcrime.se/

http://unofficialhj.gotdns.org/

http://www.unoriginalforums.com/

http://www.untouchable.cc/

http://www.upx8.com/

http://www.usernames.org/

http://www.usoppn66bwsh3oot.onion/

http://www.uw-team.org/

http://www.uxt.ooo/

http://www.v-carder.com/

http://www.v-carder.ws/

http://www.v-h.su/

http://www.v3nen0.com/

http://www.v3rmillion.net/

http://www.v4-team.com/

http://www.v4u.vn/

http://www.vakanalar.com/

http://www.val1d.cc/

http://www.val1d.net/

http://www.vavilon.cc/

http://www.vazonez.com/

http://vb.ehcommunity.com/

http://www.vb4arb.com/

http://www.vbhacker.net/

http://www.vbiv.bid/

http://www.vbspiders.com/

http://www.vctools.net/

http://www.vdfno1.com/

http://www.vendors.su/

http://www.vendorsbay.club/

http://www.verified.lu/

http://www.verified.re/

http://www.verified2ebdpvms.onion/

http://www.verifiedvendors.biz/

http://www.veryleaks.cz/

http://www.vfu.cc/

http://www.vhacking.com/

http://www.vhbgroup.net/

http://www.vhcteam.net/

http://www.vhs-team.com/

http://www.victory-turk.org/

http://www.vietmatrix.net/

http://www.viettrojan.org/

http://www.vietzilla.com/

http://www.vigilante.tech/

http://www.vip-hackerz.com/

http://www.viphackforums.net/

http://www.viprasys.org/

http://www.virtualhackers.net/

http://www.visi0nnaire.com/

http://www.vlmi.io/

http://www.vlmi.su/

http://www.vncno1.com/

http://www.vnhack.us/

http://www.vnw.cc/

http://www.void.to/

http://www.voidcore.ru/

http://www.vor.nz/

http://www.vortex-team.org/

http://www.vpnpinas.xyz/

http://www.vulnes.cc/

http://www.vvvvvvvv766nz273.onion/

http://www.vydepedev7nxcsxt.onion/

http://www.w-1-w.com/

http://www.w0rm.io/

http://www.w3challs.com/

http://www.waraxe.us/

http://wardom.com.tr/

http://www.wardriving-forum.de/

http://www.warez.red/

http://www.wasm.ru/

http://www.web-attack.ru/

http://www.webacard.com/

http://www.webcracking.com/

http://www.webcriminal.ru/

http://www.webmasters.ru/

http://www.webtoch.com/

http://www.webxakep.com/

http://www.wecrack.pw/

http://www.wehave.info/

http://www.werb-ung.su/

http://www.wesecret.in/

http://www.white-obnal.ru/

http://www.whiteiran-hat.org/

http://whk.drawcoders.net/

http://www.wilderssecurity.com/

http://www.wkwjr7pn7xubtpx5.onion/

http://www.wobergeneral.xyz/

http://www.wolfhyper.com/

http://www.woodmann.com/

http://www.world-dev.com/

http://www.world-hacking.eu/

http://www.world-sec.info/

http://www.worlddumps.org/

http://www.worldofhacker.com/

http://www.worldos.ru/

http://www.wph-crew.in/

http://www.wphcrew.cc/

http://www.wt1.pw/

http://www.wwh-club.net/

http://www.cnhonkerarmy.com/

http://www.gofuckbiz.com/

http://www.hackzone.ru/

http://www.ihonker.org/

http://www.promarket.ws/

http://www.turkhackteam.org/

http://www.x-cult.org/

http://www.x-hack.ru/

http://www.x-hard.pro/

http://www.x0rp.com/

http://www.x6x.net/

http://www.x7bwsmcore5fmx56.onion/

http://www.xakep.trade/

http://www.xakepy.ru/

http://www.xaker-forum.ru/

http://www.xaker.name/

http://www.xaker26.info/

http://www.xakeroff.net/

http://www.xakfor.net/

http://www.xaknet.org/

http://www.xakzona.com/

http://www.xblhackers.com/

http://xcode.or.id/

http://www.xcrack.net/

http://www.xellsys.com/

http://www.xen0x.org/

http://www.xgr0up.net/

http://www.xgroupvn.org/

http://www.xhackers.ru/

http://www.xhackx.net/

http://www.xhc.cx/

http://www.xhydra.com/

http://www.xn--vitrat-jk8b.vn/

http://www.xploitworld.net/

http://www.xplosive-crew.cc/

http://www.xquad.ru/

http://www.xss.is/

http://www.xtremecrip.ws/

http://www.xtremeroot.net/

http://www.xutils.ru/

http://www.y-fighter.com/

http://www.yahchatter.com/

http://www.yahoo98.org/

http://www.yahooaction.com/

http://yogyacarderlink.web.id/

http://www.youhack.ru/

http://yunsuo.com.cn/

http://www.z0ne-red.org/

http://www.z3r0-security.com/

http://www.zacodim.ru/

http://www.zarabyte.com/

http://www.zarbat.org/

http://www.zblock.co/

http://www.zenk-security.com/

http://www.zentrixplus.net/

http://www.zero-security.org/

http://www.zevkli.org/

http://www.zhacker.net/

http://www.zhk.su/





http://www.zillionere.com/

http://zion-network.co.uk/

http://www.zismo.biz/

http://www.zone-academie.com/

http://www.zs-squad.com/

http://www.zugriff.cc/

http://www.zyberph.com/

Bonus Content - Cybercriminals Personally

Identifiable Email Address Accounts

meganlm1995@gmail.com

CwZpacK@hotmail.com.tr

petrosyan.nikita2017@yandex.ru

zukko_shop@mail.ru

devilteam@devilteam.su

onyxia2015@yandex.ru

ballantinesboyz@protonmail.com

djhio54852@sina.com

ttb999999999@gmail.com

STF.ST@anonymize.com

theboutik@free.fr

temo.rocky@gmail.com

farfsha3arbia@gmail.com

avpro4em@mail.ru

habadomains@gmail.com

hacker.iranian73@yahoo.com

csucclub@ya.ru

943553366@qq.com

bit-team@mail.ru

68857640@qq.com

savinevgeniyahdl@mail.ru

jurgen@opus.ws

isahackers@gmail.com

nvtrung12@gmail.com

1domains12345@gmail.com

janeverno@gmail.com

garage4hackers@gmail.com

admin@prologic.su

crdpro@rambler.ru

linziyu2020@gmail.com

ilia@krukover.ru

ggutilities@gmail.com

zaxarovserg@online.ua

rscp888@gmail.com

chaohengli011@outlook.com

gaelspb@gmail.com

svobodu@mail.ru

aishanshan8889@gmail.com

egorea1999@gmail.com

obstructhygi@gmail.com

n0_sec@yahoo.it

koroshehtaheri@gmail.com

janekvind@yahoo.com

bluehacker37@gmail.com

roller75s@bk.ru

mindyderouen31@gmail.com

damonhan960606@gmail.com

milen.radumilo@gmail.com

mrjohnnychin@yahoo.co.uk

bluetextmama@gmail.com

ventorhack@gmail.com

gott_mit_uns@yahoo.com

tcctteam@yahoo.com

rozblog.com@gmail.com

puspenduseo@gmail.com

tps@live.fr

parkdns@gmail.com

vlmi.su@yandex.ru

kurdcoo@gmail.com

mgg.back@gmail.com

ramprasad189@gmail.com

ryan.sutrisno@gmail.com

sqebd.com@gmail.com

phaniraj1089@gmail.com

themaggoo007@gmail.com

ordervps123@gmail.com

offshorewarezhosting@gmail.com

mahmutwarrior@gmail.com

quequero@gmail.com

rubyverified@gmail.com

dariush.nasirpour@gmail.com

aras.kurd@gmail.com

krolle.noob@gmail.com

ottobot001@gmail.com

blackhat0@gmail.com

fog.welly@gmail.com

courtlandallen@gmail.com

dahom424@gmail.com

satriafhattwa42@gmail.com

megastardark@gmail.com

divanesoz@gmail.com

gzhaaproduction@gmail.com

emperor.security.tm@gmail.com

shokufeh.a.96@gmail.com

persia.blackhat@gmail.com

ms1608u@gmail.com

kristina.azarova1989@gmail.com

the.yellow.fall@gmail.com

iedb.team@gmail.com

Mr.Dovi@gmail.com

hispacrewjd@gmail.com

matiu321@gmail.com

bhtfounder@gmail.com

BestDN@gmail.com

rwina8@gmail.com

sec4all.org@gmail.com

suslikovnet@gmail.com

3000fil@gmail.com

gamernationletsgame@gmail.com

navaneet31@gmail.com

Razor.dz333@gmail.com

root.smasher@gmail.com

vuthanhlai@gmail.com

hotroteenviet4@gmail.com

abasi.hasan2afm@gmail.com

yarik.revosik@gmail.com

turkcrews@gmail.com

bvihostmaster@gmail.com

vanillaholdings@gmail.com

almutem.alsyrie1@gmail.com

belozorenko4@gmail.com

illeg4lizm@gmail.com

mohdzaharudin@gmail.com

asmargeek@gmail.com

yahellz1989@gmail.com

surabayablackhat@gmail.com

jasaiklan62@gmail.com

mhdwasiman@gmail.com

dangel2.team@gmail.com

demonforums@gmail.com

dhananjay753@gmail.com

anhlngo@gmail.com

sevketcan22@gmail.com

unh0lys0daz@gmail.com

email1234567@gmail.com

rafael.felix.fuentes28@gmail.com

labro90@gmail.com

iamtjh2@gmail.com

trickforums@gmail.com

pcdunyasipc@gmail.com

cool20300@gmail.com

xavicibi@gmail.com

wwwinvests@gmail.com

pcompaqto@gmail.com

info.bpw@gmail.com

blessfx@gmail.com

maksim.zna@gmail.com

attackersecteam@gmail.com

aaezha@gmail.com

gso.gsecur@gmail.com

cextor.phl@gmail.com

hemensatiyorumm@gmail.com

batuhaner85@gmail.com

tfmapcrewaqva@gmail.com

krrrroookkite@gmail.com

alligator.cash@gmail.com

xturkler@gmail.com

osavenko@gmail.com

ht.0x00@gmail.com

evva6789@gmail.com

petabyte64@gmail.com

intersolvednames@gmail.com

d4bos.akan@gmail.com

dlhenry414@gmail.com

r0d3ntsquad@gmail.com

prohexuh@gmail.com

freebuf@gmail.com

cyberizm.org@gmail.com

murgullukesh@gmail.com

sandeepk.l337@gmail.com

derzarosche@gmail.com

go4infotecht@gmail.com

usmanokoya10@gmail.com

thorsten.holz@gmail.com

wesleyalessandro680@gmail.com

anarchieforum@gmail.com

cellphonerise@gmail.com

darkproofse@gmail.com

bdinj3ct0r@gmail.com

blackstar6781@gmail.com

lisdaniel9@gmail.com

vhanzdotid@gmail.com

vhannz.id@gmail.com

dinno.seven@gmail.com

anhluong25071998@gmail.com

fernandowinnett@gmail.com

killfrenzy05@gmail.com

karder2014pro@gmail.com

ctouma2@gmail.com

mohammedalmatary@gmail.com

springupmedia@gmail.com

legioner2kk@gmail.com

almatarimohammed@gmail.com

mig33x@gmail.com

abhdomain@gmail.com

Mhdghd2@gmail.com

omar.ashfaq109@gmail.com

mrh4885@gmail.com

minfin22@gmail.com

JoostinOnline@gmail.com

samirnet2@gmail.com

wikunamu.com@gmail.com

bagusrahmat@gmail.com

tietjenk@gmail.com

backlinks79@gmail.com

legacyofericka@gmail.com

gaelspb@gmail.com,svobodu@mail.ru

souljanboy@gmail.com

mortalkombatteam@gmail.com

dallas.place123@gmail.com

cardchinaunionpay@gmail.com

ugamasabastine@gmail.com

powerproductsco@gmail.com

inmyminduaredown@gmail.com

modena101@gmail.com

eamilfeyziyev@gmail.com

realjobs604@gmail.com

gaoddaw@gmail.com

resistemup@gmail.com

bgbryanguzman0@gmail.com

new.2017.life@gmail.com

h3art.patient@gmail.com

efnasdu@gmail.com

thesujit@gmail.com

cosarhasanzadeh73@gmail.com

ust4t4@gmail.com

ashik.ratnani@gmail.com

tmdpainting@gmail.com

joshuavidana@gmail.com

taylor.blackhat@gmail.com

thekishansharma@gmail.com

orxan204@gmail.com

alexbtp@gmail.com

uvajedofficial@gmail.com

aliaalipourr@gmail.com

bmalashev1@gmail.com

tustedo@gmail.com

ieenerji@gmail.com

itzNickM@gmail.com

turkhackteamiletisim@gmail.com

adsl74@gmail.com

webservicesagency@gmail.com

psychomarine@gmail.com

ddmr26@gmail.com

userrus24314@gmail.com

include.su@gmail.com

vart001@gmail.com

guoyear@gmail.com

leolanny470@gmail.com

sugianto.iis84@gmail.com

earl.gangoso@gmail.com

domains-ltd@gmail.com

massdomain@gmail.com

patronhost@gmail.com

datablitzme@gmail.com

piepier.pierabo@gmail.com

eon8bbs@gmail.com

sharp.secure@gmail.com
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alessilaura@tiscali.it

alessio.ale77@virgilio.it

alessio.mariani27@tiscali.it

alessio.pistidda@tiscali.it

alessio.ufficio@tiscali.it

alessio104@virgilio.it

alessiocaggiano@virgilio.it

alessiocoppa@virgilio.it

alessiopinguino@tiscali.it

alessiopisano73@tiscali.it

alessrossetti@tiscali.it

aleung0225@gmail.com

alex.270@live.se

alex.alindre@aliceadsl.fr

alex.bart@web.de

alex.bosetti@tiscali.it

Alex.C.Fantauzzi@gmail.com

alex.clark31@yahoo.com

alex.dite@tiscali.it

alex.driver@tiscali.it

alex.eg.hinton@gmail.com

alex.gray@lycos.com

alex.massacci@tiscali.it

alex.moller@gmail.com

alex.ramirez78@yahoo.com

alex.ronzino@tiscali.it

alex.tie59@gmail.com

alex.tifui@shaw.ca

alex.tribal@tiscali.it

alex.wess@hotmail.com

alex@agcorps.com

Alex@BombinoandAssociates.com

alex@initechappraisals.com

alex@reodesk.com

alex@shar.ca

alex@slab.org

alex@zimmerei-krenz.de

alex_kat@tiscali.it

alex_nguyen299@yahoo.com

alex_r91@tiscali.it

alex_rosso1@virgilio.it

alex_sandy88@web.de

alex_serena@tiscali.it

alex_yuth@hotmail.com

alex160796@web.de

alex23rocks@hotmail.com

alex29221@freenet.de

alex2k@ngi.it

alex765000@tiscali.it

alexaguado53@gmail.com

alexakp1@gmail.com

alexa-lt@yandex.ru

alexand676@aol.com

alexand970@aol.com

alexander.a.palma@gmail.com

alexander.lang@eme-slr.de

alexander.mader@a1.net

alexander.silbernagel@uni-rostock.de

alexander_amend@wuh-lengerich.de

alexander2095@yahoo.com

alexander2099@tiscali.it

alexander-daun@arcor.de

alexanderkorf@gmx.net

alexanderkwokng@gmail.com

alexanderseys@gmail.com

alexandervevans@gmail.com

alexandra.bialke@gmx.de

Alexandra.Gronek@web.de

alexandra.kafka@freenet.de

alexandra.lohr@longandfoster.com

alexandra7@gmx.net

alexandrabackus@yahoo.de

Alexandrafolz@web.de

alexandrareinhold@web.de

alexandrebatistabernardo@live.com.pt

alexandrebc@free.fr

alexandrecttf@hotmail.com

alexandru_vlad21@yahoo.com

alexandrupetrache2005@yahoo.com

alexaria10@virgilio.it

alexbpb@gmail.com

alexbrendt@gmx.de

alex-brock@gmx.de

alexc323232@hotmail.com

alexcolon1@gmail.com

alexdeleo@tiscali.it

alexdooleykgr@sbcglobal.net

alexdurr@yahoo.com

alexederrico@gmail.com

alexedlington@gmail.com

alexedmond@sprint.blackberry.net

alexeybpo@yahoo.com

alexfacelli@tiscali.it

alexhelen1@hotmail.com

alexia.q@tiscali.it

alexica4@yahoo.com

alexin007@live.com

alexiphone1@gmail.com

alexis.bryant@century21thomas.com

alexis.l.simon@gmail.com

Alexis@TeamRLW.com

alexisbryant@gmail.com

alexisdu35@free.fr

alexismartinaa@hotmail.com

alexismolinasantana@yahoo.com

alexk5555@yahoo.com

Alexkeller1@gmail.com

alexleon@firstteam.com

alexlevin.broker@gmail.com

alexmbarton@gmail.com

alexmoretti80@tiscali.it

alexmvp305@hotmail.com

alexnevilledevil@msn.com

alexnmeghan@gmail.com

alexpeix@gmail.com

alexpete@tiscali.it

alexpolo85@tiscali.it

alexr@skies.com

alexraim@tiscali.it

alexrocca@infinito.it

alexsandroduartehc@gmail.com

alexscheidsbach@aol.com

alexstrete@yahoo.com

alextac98@gmail.com

alextheboy16@gmail.com

alexu.kerstin@blue-cable.de

alexukerstin@blue-cable.de

alexvez79@tiscali.it

alex-willmann@mail.ru

alexxander69@tiscali.it

alexzampino@tiscali.it

alezac3@virgilio.it

alezzz91@virgilio.it

alfa.matrix@virgilio.it

alfa.system@tiscali.it

alfa66a@virgilio.it

alfabetoinformatico@virgilio.it

alfaomega4@tiscali.it

alfavectra1900@tiscali.it

alfdamato@hotmail.it

alfemary@tiscali.it

alfepaca@tiscali.it

alfesposito@live.it

alfie_richardsona@yahoo.co.uk

alfonemariano@tiscali.it

alfonso.avigliano@virgilio.it

alfonsodifinizio@virgilio.it

alfred@aczogalla.de

alfred_acctexec@yahoo.com

alfredo.edil@tiscali.it

alfredo.epifani1@virgilio.it

alfredomaiolese@tiscali.it

alfredtan91@hotmail.com

alfrischmann@gmail.com

alfy2@tiscali.it

alg188@gmail.com

algalt325@aol.com

algernon_foster@yahoo.com

alghouta@emirates.net.ae

algiordan@tiscali.it

algis05@mail.ru

algroesbeck@gmail.com

alguiro@free.fr

algymantas@mail.ru

ali.giu@tiscali.it

ali@amluckrealty.com

Ali@VAbpo.com

ali_icy@hotmail.com

ali1230sheikh@hotmail.com

alia54@mail.ru

aliamak@mail.ru

aliapoulr08@gmail.com

alibina811@gmail.com

alibirds@tiscali.it

alice.carboni90@tiscali.it

alice.roselli@tiscali.it

alice.vlauss@gmx.net

alicedollar@msn.com

alicem4@virgilio.it

alicemarica1978@tiscali.it

alicemcmahon27@gmail.com

alicesciacca@tiscali.it

aliceskrania@virgilio.it

alicia.levy@realtydirect.com

Alicia.Schindle@gmail.com

alicia@annemillerrealestate.com

alicia@crownrealtyonline.com

alicia@homes911.com

alicia_23@tiscali.it

alicia_inez@hotmail.com

aliciaackman@yahoo.com

aliciaegutierrez@gmail.com

aliciajones@jlta.net

aliciawoodberry@gmail.com

aliebert@murney.com

alieksandr.abramov.97@mail.ru

alieksandr.anisimov.61@mail.ru

alieksandr.bobrov.85@mail.ru

alieksandr.fomin.1955@mail.ru

alieksandr.gadzhiiev@mail.ru

alieksandr.mordasov@mail.ru

alieksandr.potapov.87@mail.ru

alieksandr.pupkin.95@mail.ru

alieksandr.safonov.56@mail.ru

alieksandr.zhdanov.92@mail.ru

alieksandr_nabiiev@mail.ru

alieksandr_shmieliov@mail.ru

alieksandr_tarasov_58@mail.ru

alieksandr_zakharov_67@mail.ru

alieksandr-kozlov-2015@mail.ru

alieksandr-popov-1959@mail.ru

alieksandr-volkov-2015@mail.ru

alieksieiev-maksimka@mail.ru

alien1508@gmx.de

alienhuntr@aol.com

alienware1974@cox.net

aliew1739@gmail.com

aliiev-dienis@mail.ru

aliirwin@outlook.com

alik.volkov@hotmail.com

alimajluv@aol.com

alimbaugh@msn.com

alina.weil@t-online.de

alina@malandseitz.com

alinaqvi@verizon.net

alinawinter@web.de

alinaworld@gmx.de

Alink426@yahoo.com

alionax@mail.ru

alionbisha@virgilio.it

aliosha.koroliov@mail.ru

alipietsk@mail.ru

alipinskas@yandex.ru

aliprandialberto@virgilio.it

AlisaatHomeSmart@aol.com

alisamu@tiscali.it

alisha.l.gordon@gmail.com

alishadawn33@gmail.com

alisiasellshomes@aol.com

alison.polson@c21bowman.com

alison.schoenberger@gmail.com

AlisonBan02@gmail.com

alisonreggie@gmail.com

alissimila@tiscali.it

alita@deanadamsre.com

alita@membersgroup.net

aljoy@tiscali.it

all_misteriosa@tiscali.it

allan.andersen@dk.ey.com

allan.cairns@gmail.com

allan@mycarync.com

allanjohnstonkdy@yahoo.co.uk

AllanSalem@aol.com

AllansAppraisal@sbcglobal.net

allansuap@hotmail.com

allaspectappraisals@comcast.net

allbor@msn.com

allbpos@gmail.com

alldone1995@aol.com

alleeez@hotmail.com

allegra7171@tiscali.it

allegrini69@virgilio.it

allelink@comcast.net

allen.i@virgilio.it

allen.morrison@gmail.com

allen@porterdavisrealty.com

allen5009@bellsouth.net

AllenAppraisals@comcast.net

allencbliss@gmail.com

allencrichlow@hotmail.com

AllenJoffe@hotmail.com

alleno@verizon.net

allenteam@kw.com

allenwilkerson@cox.net

alleroth@hotmail.com

allhudmd@gmail.com

allianceappraisers@yahoo.com

allie.marie71@yahoo.com

allison.faubel@gmail.com

allison.jaeger@gbc-arizona.com

allison.yawn@era.com

allison85@gmail.com

allisonjaaeger@msn.com

allisonmy@aol.com

AllisonRowe.Remax@gmail.com

allitugman@gmail.com

alliwarner@yahoo.com

allowus@aol.com

allpro@telus.net

allprorealty@aol.com

allprosales@hotmail.com

ALLREO@aol.com

allriteco@aol.com

allserviceappraiser@gmail.com

allstarbpo@gmail.com

allstarkms23@aol.com

allstarrealty1@aol.com

allworthrealty@gmail.com

allxmnk@gmail.com

allyouhaveisnow@msn.com

allyroger@gmail.com

allysrl@tiscali.it

allyvelasquez@yahoo.com

almaelnaaman@gmail.com

almaz_filippov@mail.ru

almazze@hotmail.com

almendREOAgent@yahoo.com

almita06@yahoo.com.mx

almodest@tiscali.it

almostgerbils@yahoo.com

almoto@tiscali.it

alnash15@gmail.com

alobo1@gmail.com

alochner@web.de

alofton@altruisticservices.com

AlohaAppraisals@aol.com

AlohaCarole@Century21.com

alomath@free.fr

alonso5811@hotmail.com

alonzocastanon@live.com

aloukienko@gmail.com

aloysius2006@comcast.net

alparslan@sistemo.com.tr

alpay@priorityapprasialusa.com

alper.oymak@gmail.com

Alpha1@embarqmail.com

alpha11906@yahoo.com

alpha-appraisals@comcast.net

alphagames114@gmail.com

alpharabe@web.de

alpharealty@helpusell.com

alphawest101@yahoo.com

alpina1985@mail.ru

alpinemsi@sbcglobal.net

alpinemsi3@yahoo.com

alpkaya032@hotmail.com

alrichard@charter.net

alsapienza@aol.com

alsapps@gmail.com

alsheimer.nicole@web.de

alstonsouthernconsulting@gmail.com

altagrace81@gmail.com

altar.bey@freenet.de

alten-nordheim@t-online.de

altenuwepfleger@web.de

alterna94@aol.com

altezzina@tiscali.it

altfil@web.de

altopower@gmail.com

altus5@yandex.ru

altusrealtor@yahoo.com

altychickhen@gmail.com

ALuetticke@t-online.de

alundremcghee@yahoo.com

alurasmommie@yahoo.com

aluscombe@frontiernet.net

alvaivan@aol.com

alvaradodannym@yahoo.com

alvarocapo41@gmail.com

alvaromartinc@gmail.com

Alvaropacificrealty@gmail.com

alvarorajo@earthlink.net

alvesferro75@tiscali.it

alvin.abano@gmail.com

alvinpapa@therwmgroup.com

alvinsullivan@me.com

alwaysathena1@yahoo.com

alwayshere4fun@comcast.net

alwaysmotivated@comcast.net

alxv66@yandex.ru

alyasuda-REO-Agent@att.net

alydoesminecraft@hotmail.com

alyfife@gmail.com

alyhair2002@gmail.com

alyposey@gmail.com

alyssa_giorda@hotmail.com

alyssa55123@yahoo.com

alyssahekse@gmail.com

alyssalawton@rocketmail.com

alyssam_fox88@hotmail.com

AlyssaPandaEyes@gmail.com

alyssarose12342000@yahoo.com

am_fm@comcast.net

amaapp@bellsouth.net

Amador@amafina.com

amafoggia@tiscali.it

amahler@real-serv.com

amalia_moro@virgilio.it

AmalieSvendsen@hotmail.com

amaliethorsen@hotmail.com

amalone@remax.net

amanda.carlisle@yahoo.com

Amanda.J.Hardesty@gmail.com

amanda.laskin@gmail.com

amanda.tuckersellshomes@gmail.com

amanda@cityappraisalservices.com

amanda1ruckman@gmail.com

amandac@mtginsurance.com

amandadykan@gmail.com

AmandaEvans31@aol.com

amandah575@yahoo.com

amandahuggins2002@yahoo.com

amandaj_1984@yahoo.com

amandalee312000@yahoo.com

amandalwatters@yahoo.com

AmandaMatherly@ymail.com

amandamoss1@hotmail.com

amandasanders@austinbrokersreo.com

amandasauls@gmail.com

amandyestatte@hotmail.com

amann_marc@hotmail.com

amanougian@cs.com

amaranta04@tiscali.it

amarauzokwe@hotmail.co.uk

amargheriti@tiscali.it

amarnel@aol.com

amarrosu@tiscali.it

amarsh@abrealestategroup.com

amarucummings619@gmail.com

amason@resmaemortgage.com

amatima@virgilio.it

amatoalberto@tiscali.it

amayaarlise@yahoo.com

amazingnmj@gmail.com

amazingunicornzz1234@gmail.com

ambar423@yahoo.com

ambartels07@yahoo.com

amber.cummins@allentate.com

amber.difebo@gmail.com

amber.kraska@gmail.com

amber@remaxwisconsin.com

amber1warner@gmail.com

amberbock224@aol.com

ambercurran@remax.net

ambergirrbach@comcast.net

ambermgarcia@yahoo.com

Amberrleiigh@gmail.com

ambientappraisal@gmail.com

ambran97@yahoo.com

ambyrchrys@gmail.com

amcechma@aol.com

amcorders1@gmail.com

amd.mccarthy@gmail.com

amdbpbca@yahoo.com

Amdip95@gmail.com

amedeo.picciolo@tiscali.it

ameets21@gmail.com

amelie.eric@free.fr

amelinebpo@gmail.com

america56@tiscali.it

americacienxciento@yahoo.com

americanimagerealty@cox.net

americanintegrity@ymail.com

americobu@tiscali.it

amerigo.t@tiscali.it

ameringo17@aol.com

AmerivestAtlanta@gmail.com

amethawilliams@yahoo.com

amginevra@tiscali.it

amgrealty@yahoo.com

amic50@tiscali.it

amick123@aol.com

amiemccarthy@cox.net

amigodatreta@sapo.pt

amigofernando8@gmail.com

amille3@columbus.rr.com

amir.znz@hotmail.co.nz

amir@asappraisals.com

amirfazlic@hotmail.com

amirkhan@mris.com

amistad001@msn.com

amisweeney@verizon.net

amitch970@hotmail.com

amiwhiddonbpo@gmail.com

amix.bernfort@hotmail.com

amj.LEvourch@free.fr

amkennery@gmail.com

amkolev@yahoo.com

amlilmobley@gmail.com

ammbear@gmail.com

ammperry2@yahoo.com

amnlinpug@mail.ru

amodeoluigi@tiscali.it

amondl@mkelleycompanies.com

amontalvowps@gmail.com

amor.fati78@gmail.com

amorini@austin.rr.com

amorrison0505@yahoo.com

amos.cohoe@gmail.com

amosh@usa.com

amougnantom@tiscali.it

amprafel@gmail.com

amreaest@bellsouth.net

amron2k2@gmail.com

ams0596@gmail.com

ams1rebroker@aol.com

Amy.Agee@Crye-Leike.com

amy.armentrout@kingthompson.com

amy@allianceproperties.com

amy@amycheema.com

Amy@AmyHoag.com

amy@cyssr.com

amy@sarasotareo.com

Amy_7f@yahoo.com

Amy082414@yahoo.com

amyadkins@kw.com

amybrown.bpopro@comcast.net

amybsmith@carolina.rr.com

amybullard@gmail.com

amychella@gmail.com

amycustode@gmail.com

amycwilloughby@yahoo.com

amyewalker@gmail.com

amygerrits@remax.net

amyhayes.outdoorsrealty@yahoo.com

amyhumphrey.realtor@yahoo.com

amyjnathan@msn.com

amyleonardo@remax.net

amymccavitt@yahoo.com

amymoffatt@realestateone.com

amyoberholtzer@att.net

amys@tiscali.it

amyshanahan2002@yahoo.com

amyshocket@sbcglobal.net

amysimonee@hotmail.com

amyspaldingcole@gmail.com

amytbusch@gmail.com

amytwary@earthlink.net

amyz@homesnwonline.com

ana.galadzhyan@gmail.com

ana.galadzhyan@yahoo.com

Ana1magdaleno@hotmail.com

anabanana2129@gmail.com

ana-dragon@web.de

Anakary1@hotmail.com

anakcekatan@yahoo.com

analourinho2000@hotmail.com

anamae@core.com

anamorales@don.com

anandiluscher@hotmail.com

anap9@netscape.net

anaperstak@ziprealty.com

anappraisalcompany@tx.rr.com

anarealblanco@yahoo.com

anarqst@aol.com

anas.alk@gmail.com

anatriellocarmela@virgilio.it

anavaustin@yahoo.com

anavela.dasilva1@aliceadsl.fr

anbertacchi@tiscali.it

anbru@tiscali.it

anchorappraisalsinc@verizon.net

ancona_angela@tiscali.it

and1jd@aol.com

Andant.other@gmail.com

AndAppraise@aol.com

andcorin@virgilio.it

andeej@tiscali.it

ander.austa@gmail.com

anders.aarbo@gmail.com

anders@deleicht.dk

andersensells@gmail.com

Anderserbest@hotmail.com

anderson.auzier30@uol.com.br

anderson_brian_2000@yahoo.com

AndersonAppraisals@sbcglobal.net

andersonjoey65@yahoo.com

andersson.markus@gmail.com

andi3372@aol.com

andich15@freenet.de

andra1995017@yahoo.com

AndraLaxton@aol.com

andrasko15@yahoo.com

andre.auzeric@aliceadsl.fr

andre.deias@tiscali.it

andre.furcron@ziprealty.com

andre.giusy@tiscali.it

andre.ribeiro@aliceadsl.fr

andre.rugger@tiscali.it

andre.vicco@virgilio.it

andre0278@tiscali.it

andre891@virgilio.it

andrea.a1977@infinito.it

andrea.becchere@tiscali.it

andrea.caralp41@aliceadsl.fr

andrea.ciaffi@virgilio.it

andrea.cng@tiscali.it

andrea.comandi@virgilio.it

andrea.dagna@tiscali.it

andrea.fioriello@tiscali.it

andrea.france@tiscali.it

andrea.groves@envirian.com

andrea.luddi@tiscali.it

andrea.luzzana@virgilio.it

andrea.marunti@tiscali.it

andrea.pimpolari@fastwebnet.it

andrea.rossati@gmail.com

andrea.sousa@comcast.net

andrea.tarquini1@virgilio.it

andrea.terazzan@tiscali.it

andrea.vanni96@tiscali.it

andrea@andreawebb.com

andrea@meneghettiandrea.it

andrea@nomirealty.com

andrea_barca@tiscali.it

andrea_c21@ymail.com

andrea_pellegrino91@tiscali.it

andrea_zacchi@virgilio.it

andrea1149@virgilio.it

andrea15172@tiscali.it

andrea19_94@live.it

andrea24111990@tiscali.it

AndreaAtReMax@yahoo.com

andreababbi@tiscali.it

andreaboni@fastwebnet.it

andreac21s@aol.com

andrea-cardinale@tiscali.it

andrea-cav@tiscali.it

andreadenotti@tiscali.it

andreafelps@realestateone.com

andreafinocchio@tiscali.it

andreagarau2@virgilio.it

andreahebdon@yahoo.com

andreaisidori@tiscali.it

andrealaporta89@tiscali.it

andreamalt2000@tiscali.it

andreamereu75@tiscali.it

andreamsh1972@tiscali.it

andreantolini@tiscali.it

andreapiarulli@tiscali.it

andreapoling@prudentiallandmark.com

andreas-9@live.dk

andreasartirana1@virgilio.it

andreas-dolch@web.de

andreassi.mirko@tiscali.it

andreaszekrenyi@kw.com

andrei23@tiscali.it

andrej45@hotmail.com

andrejicek.kolar@email.cz

andrello.fortu@tiscali.it

andremang@virgilio.it

andreneivajf@hotmail.com

andreone88@tiscali.it

andrepiuri@tiscali.it

andreptr@tiscali.it

andrereo@gmail.com

andrerogerluc@free.fr

Andresarraf@hotmail.com

andresc423@hotmail.com

andresitoduranruiz@hotmail.com

andres-lumty@live.com.ar

andretagarra.123@gmail.com

andrevaz270799@gmail.com

Andrew.Brosnac@elitereo.com

andrew.c.s@hotmail.fr

andrew.c.sauls@gmail.com

andrew.cameron@pacunion.com

andrew.jarder@nemoq.se

andrew.kong@mail.ru

andrew.papamichael@yahoo.com

andrew.paton@tiscali.it

andrew.rigel@yahoo.com

Andrew.s.Robinson@gmail.com

andrew.vantiem@gmail.com

andrew.watson@century21.com

Andrew@24hrpreservation.com

Andrew@andrewwilson.com

andrew@utahreopro.com

andrew_curtis6@bigpond.com

andrew_vince@hotmail.com

andrew401@gmail.com

andrew592@gmail.com

andrewaue@gmail.com

andrewblablabla55@gmail.com

andrewckidd@btinternet.com

andrewdj@live.it

AndrewEngel2007@yahoo.com

andrewfernandez@remax.net

andrewflagg@don.com

andrewflores55@yahoo.com

andrewgottschall@att.net

andrewhilt@hotmail.com

andrewhope2012@gmail.com

andrewhyatt@comcast.net

andrewjkwiatkowski@gmail.com

andrewjohnson4014@gmail.com

andrewjroy@hotmail.com

andrewjurgens@realtyexecutives.com

andrewlaszcz@hotmail.com

andrewlee193@hotmail.com

andrewlevine21@yahoo.com

andrewmapleleafs@me.com

andrewmcb@ymail.com

andrewmeena@gmail.com

andrewokelley@gmail.com

Andrewrojas420@yahoo.com

andrewromano@virgilio.it

andrewrsm@gmail.com

andrewshao01@gmail.com

andrewshipes@hotmail.com

andrewt323@yahoo.com

andrewterry1992@yahoo.co.uk

andrey.genych@mail.ru

andriasdf@yahoo.de

andrieiev.toni@mail.ru

andrieiev.vadimka@mail.ru

Andrieshomesales@cox.net

andrilbrewer@yahoo.com

andrius39@Inbox.lt

andriusvildziunas@mail.ru

androidk18@hotmail.com

andruhabukin13@mail.ru

andrusappraisals@cox.net

andry84@infinito.it

andrynap@tiscali.it

andrzej.piasek@o2.pl

andsi@suomi24.fi

andy.butwin@gmail.com

andy.callahan@verizon.net

andy.carey@metrobrokers.com

andy.douglas@gmail.com

andy.patel@cbnorcal.com

andy@266HOME.com

Andy@AndyMindelTeam.com

andy@appraisal-associates.com

andy@appraisalhub.com

andy@ask-appraisals.com

Andy@Imperialrange.co.uk

andy@swirealty.net

andy02080@gmail.com

andy2_1991@hotmail.com

andyament@aol.com

andyandrobyn@gmail.com

andybuch@yahoo.com

AndyC@duley-realtor.com

andyd@remax.net

andyduggansports@gmail.com

andygarcia9819@yahoo.com

andyhammy@hotmail.co.uk

andyl@johnlscott.com

andylife@tiscali.it

andyloberg@yahoo.com

andymacgt@gmail.com

andyneeves@rtmc.net

andypgarcia@remax.net

andysbpo@yahoo.com

andysells@earthlink.net

andyshawmobile@yahoo.com

andysocha@sbcglobal.net

andysuffield@gmail.com

andyweant@yahoo.com

andyy.chung@hotmail.com

anecrouw@yahoo.com

aneel4home@yahoo.com

anemalas@gmx.com

anet@prusd.com

anetins@comcast.net

anette_cg12@hotmail.com

anfg@tiscali.it

anfproduction@hotmail.co.uk

ang.concu@tiscali.it

ang.tocco@tiscali.it

ang93t4@aol.com

ange@shopazhomes.net

angee413@aol.com

angejunia@orange.fr

angel.cal@tiscali.it

angel.gastelum@gmail.com

angel@moveu2fl.com

angel_ac_01@hotmail.com

angel2trevino@yahoo.com

angela.amr@tiscali.it

angela.aprile84@virgilio.it

angela.colla@virgilio.it

angela.dal@tiscali.it

angela@angelamartin.net

angela@benoitappraisal.com

angela@innovationsrealtygroup.com

Angela_adair@hotmail.com

angela_bartozzi@virgilio.it

Angela_miller@kw.com

angela_oliver@simplysold.com

angelaardica@tiscali.it

angelacantyhomes@hotmail.com

angelaclark1@sbcglobal.net

angelacorcoranbroker@gmail.com

angelacurri@virgilio.it

angeladarby@gmail.com

angeladunford79@yahoo.com

angelafrontoso@virgilio.it

angelaherninc@comcast.net

angelamassey75@yahoo.com

angelamortgage@aol.com

angelamowles82@yahoo.com

angelanicita@virgilio.it

angelaong@windermere.com

angelapeters@ymail.com

AngelaPorcell@gmail.com

angelaquilala@gmail.com

angelasaporito@hotmail.com

angelashomes@yahoo.com

AngelaSold@aol.com

angelazaccagna@virgilio.it

AngelBaBe6789@msn.com

angelbabe957@gmail.com

Angelbaby531@sbcglobal.net

angelbby1024@hotmail.com

angelbebe1@aol.com

Angeleung28@yahoo.com

angelini@btopenworld.com

angelini-alessandra@virgilio.it

Angelique422@aol.com

angelitaromero45@hotmail.com

angelkiss6485@yahoo.com

angelkun@gmail.com

angelo.agnelli@tiscali.it

angelo.delgrosso@tiscali.it

angelo.vaccarella@yahoo.com

angelo@sfbaydwellings.com

angelo_santaana@yahoo.com

Angelo215@verizon.net

angeloattaguile@tiscali.it

angelofpassion99@yahoo.com

angeloleo92@tiscali.it

angelomaloberti1995@yahoo.com

angelomarcolivio@virgilio.it

angelopolis1_2009@hotmail.com

angels2000_886@msn.com

angelsfb@hotmail.de

angelus844@tiscali.it

angeluses@yandex.ru

angelwilliams1@kw.com

angelwms1@comcast.net

angelyourREOagent@yahoo.com

angesam@vodafone.it

angi@hayeshousehunters.com

angie.dinkins@comcast.net

angie.fosnaugh@realliving.com

angie.hammel@uslighthouserealty.com

angie.reed@coldwellbanker.com

angie@acgreopros.com

angie@angieancheta.com

angie@angiediaz.com

angie@arodriguez.net

angie@inwrealty.com

angie@westmireo.com

angieboule@gmail.com

angiekinsella76@gmail.com

angielovesyouuu@yahoo.com

angieomara1@gmail.com

angieperry23@yahoo.com

angiew@directproperties.com

angiewalters@gmail.com

angigra@tiscali.it

angispada@tiscali.it

angius.andrea074@tiscali.it

angiusmichele@tiscali.it

angj@tpg.com.au

Angmes770@yahoo.com

angr727@yahoo.com

angwel3@yahoo.com

aniaadanna@tiscali.it

aniederhaus@yahoo.com

aniellelipe@aol.com

aniellode@tiscali.it

Anikacarr@gmail.com

anilkini@hotmail.com

animalzgrlie@yahoo.com

anime_no_sekai@hotmail.com

anisa@metroplexappraisals.com

anisagirl@mail.ru

anishe4@gmail.com

Anita@StevensRealtyNC.com

anita@tampahomesearch.com

Anita@Westcorealestate.com

Anita_g36@hotmail.com

Anita1915@hotmail.com

anitabey2@aol.com

anitadzebic@sbcglobal.net

anitarwms@yahoo.com

anitascal@free.fr

Anitra_r@hotmail.com

anjil25@verizon.net

ank139@msn.com

ankerappr@aol.com

anlist07@gmail.com

ann.bowman@remax.net

ann177@hotmail.de

Anna.B.Fritzsche@gmail.com

anna.deme@tiscali.it

anna.gh@virgilio.it

anna.hogberg72@hotmail.se

anna.janasik@arcor.de

anna.paul@osnanet.de

anna.sciascia@virgilio.it

anna.veronelli@tiscali.it

anna.yashnyk@gmail.com

anna.zoggia@tiscali.it

anna@annakannal.com

anna@hksassoc.com

anna_matsunaga@kw.com

anna_portalatin@yahoo.com

anna_rin@virgilio.it

anna_z79@virgilio.it

annabel2781@gmail.com

annabelle.riou@free.fr

annabiancamanna@virgilio.it

annabozzi@virgilio.it

annabutler@sprynet.com

annafiorenzano@virgilio.it

annagaita@virgilio.it

annagambardella@virgilio.it

annaiervolino@tiscali.it

annakhomes@yahoo.com

annakreohomes@gmail.com

annaliese.johnson@gmail.com

annalisa.panzeri@tiscali.it

annalisachiari@virgilio.it

annalisalazazzara@virgilio.it

annalisapaolini@virgilio.it

annalisapecora@virgilio.it

annalyn.reo@gmail.com

annamaria.congiu@tiscali.it

annamaria.domenico@tiscali.it

annamaria.premoli@tiscali.it

annamariafulciniti@tiscali.it

annamariapacilli@virgilio.it

annamariapr@virgilio.it

annamiddleton@windstream.net

annamsalvogallo@virgilio.it

annamusto@tiscali.it

annaneko@tiscali.it

annapaglialunga@tiscali.it

annaramsey@tampabay.rr.com

annarice23@gmail.com

annarita_giorgio@virgilio.it

annaritastruzziero@virgilio.it

annarodney@worbucks.com

annarose@tiscali.it

annarossi86@tiscali.it

annasheldrick87@gmail.com

annasneed@yahoo.com

annasonny123@yahoo.com

annaventurelli@virgilio.it

annawarm@aol.com

annawiserealtor@gmail.com

annay731@eden.rutgers.edu

annazekg@hotmail.com

annblr@aol.com

annborn2@peoplepc.com

annchristopherproperties@gmail.com

annde_peeler@yahoo.com

anne.ballentine@gmail.com

anne.snyder.1994@gmail.com

anne@owenre.com

Anne_75yp@yahoo.com

anneappr@gmail.com

anneblan13@yahoo.com

anneke@volstate.net

annelder49@comcast.net

anneli-vt@hotmail.com

Anneoklee@cox.net

annetta@siouxfallshomesforsale.com

Annette@JimmyAndAnnette.com

Annettegprice@aol.com

annettemarble@rrohio.com

annie.winterburn@kingswood.edu

annie@annsmith.net

annie8914@gmail.com

anniegoodwin1515@cox.net

anniepir@aol.com

anniju@tiscali.it

Annika.cheena@hotmail.com

annisdoug@yahoo.com

annkatvela@yandex.ru

annmariecarmody@msn.com

ann-mariem@prudentialutah.com

annmarievonarx4REO@gmail.com

annophyparp@hotmail.com

annpinchak@gmail.com

annrealty@aol.com

annsenn@gmail.com

annunci@chedeal.it

anollabeerder@gmail.com

anon@ees-ca.com

anonlist@virgilio.it

anschepi@tiscali.it

ansioni@tiscali.it

ansonywolf@gmail.com

ant.parente@virgilio.it

ant_gallego@Yahoo.com

antbiondi@tiscali.it

antcon2323@gmail.com

antcristalli@tiscali.it

antfigliolia@tiscali.it

anthemvaluation@gmail.com

anthony.blariau@hotmail.com

anthony.cl.chan@gmail.com

anthony.epolito@yahoo.com

anthony.keys1@us.army.mil

anthony.luth@uconn.edu

anthony.martin2631@yahoo.com

anthony.petini@comcast.net

anthony.reoservices@yahoo.com

anthony.smith@realtydirect.com

anthony@anthonylasala.com

anthony@anthonylilja.com

anthony@ebestates.com

Anthony@jacoboappraisal.com

anthony@jacobsudhoff.com

anthony@pigati.com

anthony@providencereo.com

anthony@signorellorealty.com

anthony@starkappraisal.com

Anthony_caruso@hotmail.com

anthony_kaye@mac.com

anthony123098@zoho.com

anthonycardoso@free.fr

anthonycc94@yahoo.com

anthonycody@remax.net

anthonyferreira338@yahoo.com

anthonyjagopat@hotmail.com

anthonymannremax@gmail.com

anthonyREO@armandotorres.com

anthonyrostant@hotmail.com

anthonytartaglia19@yahoo.com

anticipatingheat@aol.com

anticoforno.sarre@tiscali.it

Antiledo@optonline.com

antimo.cerreto@virgilio.it

Antioch@Windermere.com

antjolly@free.fr

antlarson@yahoo.com

anto.ninfea@tiscali.it

anto.sidoti@tiscali.it

anto76der@tiscali.it

anto95.nba@tiscali.it

antodeserra@tiscali.it

antoinette@sellwithsykes.com

antoinette629@hotmail.com

antomaxct79@virgilio.it

anton@kw.com

anton@lunau.dk

anton345543@gmail.com

antonella.32@tiscali.it

antonella.ceravolo@tiscali.it

antonella.piscitelli1@virgilio.it

antonella_romano@tiscali.it

antonella_sgro@virgilio.it

antonellamondo@virgilio.it

antonellapacioni@tiscali.it

antonellaterracina@virgilio.it

antonellipaola@tiscali.it

antonello.ambrosini@tiscali.it

antonello_perrone@virgilio.it

antonellolardo@tiscali.it

antonellopirina@virgilio.it

antonellotes@tiscali.it

antonemy@tiscali.it

antonicarrella@virgilio.it

antonicelligianni@virgilio.it

antonietta.moro@fastwebnet.it

antonino_valeria@virgilio.it

antoninode@tiscali.it

antoninodirienzo@virgilio.it

antoninopellegrino4@virgilio.it

antoninoventimiglia@tiscali.it

antonio.cardoso@tiscali.it

antonio.contessi@tiscali.it

antonio.corradino@email.it

antonio.imbalzano@email.it

antonio.maltese1@virgilio.it

antonio.mazzoni@virgilio.it

antonio.naccarati@virgilio.it

antonio.prc@virgilio.it

antonio.tedesco@longandfoster.com

Antonio@Hothomespot.com

antonio_putignano@tiscali.it

antonio_sterpa@virgilio.it

antonio8910@virgilio.it

antonioaprea4@virgilio.it

antoniobevere@virgilio.it

antoniocaldarella1@virgilio.it

antoniocampese@tiscali.it

antoniocox@tiscali.it

antoniodemastro@tiscali.it

antonioemisvezia@tiscali.it

antonio-miele@virgilio.it

antoniomiglioraldi@virgilio.it

antoniopulidojr@gmail.com

antoniosandov@gmail.com

antonioscalcione@virgilio.it

antoniosellshouses@comcast.net

antoniosmarino@tiscali.it

antonioswilson@hotmail.com

antonioventr@tiscali.it

antonitang@yahoo.com

antonpepi@mail.bg

antonstetner@gmail.com

antonthegr8@aol.com

antontolstik@mail.ru

antonymorley@hotmail.co.uk

antoo.87@tiscali.it

antoskill@tiscali.it

antsan66@msn.com

antwannderrell@gmail.com

antwon123@gmail.com

anueske@hotmail.com

anusha.aneel@gmail.com

anushka@amcrealty.com

anwesha.ghosh.btech@gmail.com

anyma719@gmail.com

anymisc@gmail.com

aojnielle@hotmail.com

aozreatamo@hotmail.com

Ap3katt@hotmail.com

apaliwoda@westusa.com

apbgsnetp@mail.ru

apdutrausa@gmail.com

aperkov@capwestre.com

apesathe@gmail.com

apetisco@allianceappraisalcorp.com

apexappraisalservice@neo.rr.com

apexinclena@aol.com

apexlistings@yahoo.com

apflaca@aol.com

apianway2@aol.com

apiccoli@yahoo.com

ApiradeeLVhomes@hotmail.com

aplappraisal@comcast.net

apletcher@mspreogroup.com

aplus.appraisal@gmail.com

aplusappraisals@earthlink.net

aplusreliableappraisers@comcast.net

apock50@yahoo.com

apohlkamp@aol.com

apolas99@mail.ru

apollak8@gmail.com

apolloslc@gmail.com

apop90@gmail.com

aportolesi@hlrusa.com

apowell19@hotmail.com

appartamentinispo@virgilio.it

appiohunter@yahoo.com

apple@seattleappraisers.com

apple676665@virgilio.it

appleby21@yahoo.com

appleitaly@tiscali.it

appointiok@gmail.com

apporydydrods@hotmail.com

appraisal.group@yahoo.com

appraisal.solutions.chatt@live.com

appraisal.solutions@live.com

appraisal@apogeehome.com

appraisal@appraisalhub.com

appraisal@appswf.com

appraisal@gsvalue.com

appraisal@pahroo.com

appraisal@phoenixvalleyappraisers.com

appraisal@sti.net

appraisal@verizon.net

appraisal_access@yahoo.com

appraisal_masters_inc@yahoo.com

appraisal_socal@yahoo.com

appraisalartists@msn.com

appraisaldirect@optonline.net

appraisalexperts@cox.net

appraisalexpress@att.net

appraisalexpress@cableview.tv

appraisalexpress@tampabay.rr.com

appraisalforyou@gmail.com

appraisalguy@cableone.net

appraisalnetwork@usamedia.tv

appraisaloffice@optonline.net

appraisalplus@bak.rr.com

appraisalpointe@yahoo.com

appraisalpro@roadrunner.com

appraisalprolv@cox.net

appraisals@acmeoforegon.com

appraisals@aplusstatewidellc.com

appraisals@azinst.com

appraisals@coyleappraisals.com

appraisals@datasourceappraisal.com

appraisals@eagleonepv.com

appraisals@epowerc.net

appraisals@foutsgroup.com

appraisals@greenhouserealestate.com

appraisals@hower.cc

appraisals@ibisfl.com

appraisals@ij.net

appraisals@jenningsappraisal.com

appraisals@keystoneappraisalgroup.com

appraisals@kivarealty.net

appraisals@kriewaldtappraisals.com

appraisals@lightspeedag.com

appraisals@northcal.net

appraisals@nstarenterprises.com

appraisals@ocalaappraisalgroup.com

appraisals@parkerappraisalgroup.com

appraisals@pfkruse.com

appraisals@priority-appraisal-llc.com

appraisals@salmonsen.com

APPRAISALS@southwestequity.com

appraisals@tjmagee.com

appraisals@valuationidaho.com

appraisals_by_mona@yahoo.com

appraisals1234@michiganappraisals.net

appraisals4bayarea@yahoo.com

appraisalsbyace@charter.net

appraisalservices@rocketmail.com

AppraisalServiceslv@cox.net

appraisalsf@yahoo.com

appraisalsofnca@aol.com

appraisalsolutions9@gmail.com

appraisalstream@yahoo.com

appraisalteam1@gmail.com

appraisalvaluation@att.net

appraisalzonehawaii@gmail.com

appraise@appraisal-associates.com

appraise@chestateeappraisals.com

appraise@npgcable.com

appraisela@yahoo.com

appraiser@knology.net

appraiser@oip.net

appraiser@realdatagroup.com

appraiser@surewest.net

appraiser1016240@aol.com

appraisercall@gmail.com

appraisergreg@msn.com

appraiserjen@sbcglobal.net

appraisers@everhartandassociates.com

appraisers@summitappr.com

AppraisersInk@cox.net

AppraiserSully@aol.com

Apprasail@MidwestValuation.com

appriasal.solutions@live.com

apprsrlady@verizon.net

april.dunlap@prurealty.com

april.williams@coldwellbanker.com

april@aprilneuhaus.com

april@blueinkrealty.net

April_07xw@yahoo.com

April_72bw@yahoo.com

april_roberts@yahoo.com

aprilazappraiser@aol.com

aprilbartlett@adelphia.net

aprilblackston@yahoo.com

aprilbuggs88@yahoo.com

aprilpabloff@cbbain.com

Aprilpolk53@yahoo.com

aprilwright@century21tifton.com

aprk555@naver.com

aprsvc@comcast.net

Aps@AFocusedAppraisal.com

apskaita@yandex.ru

apujols45@gmail.com

aquariumclown@gmail.com

aqueousguy@hotmail.com

aquilabianca11@virgilio.it

aquilablu@infinito.it

aquiles_odm@hotmail.com

aquillsbatiweti@gmail.com

ar.group@sbcglobal.net

ar.raimondi@virgilio.it

arabgamingksa@hotmail.com

aragonabiagio@tiscali.it

aragornx1251@yahoo.com

araisa7@hotmail.com

arakawasr@gmail.com

aram.sazonov@mail.ru

aramos@traxre.com

aranda35@gmail.com

aranwar@yahoo.com

aras@orecg.com

arasss8319@hotmail.com

aratarosalba1@tiscali.it

araynorsmith@aol.com

arcainkingdom@gmail.com

arcangelmattg@yahoo.com

arcantos1997@hotmail.com

arcaresegiovanni@tiscali.it

arcendawn@gmail.com

arch.angelochiaro@tiscali.it

arch.bologna@virgilio.it

arch.ioffredi@tiscali.it

arch.js.vandermeulen@tiscali.it

arch.lamberti@tiscali.it

arch.moceri@tiscali.it

arch.tizicimnaghi@tiscali.it

archanaprasanna@yahoo.com

archdjg@aol.com

archimpiantisas@tiscali.it

archricky@tiscali.it

arcobalenosnc1@virgilio.it

ardaocver@gmail.com

ardas@mail.ru

ardentappr@live.com

ardims@att.net

are1000@aol.com

arealappraiser@gmail.com

arealdeal513@yahoo.com

arealestco@jam.rr.com

arealtybpo@yahoo.com

areese4180@wowway.com

areisinger@kw.com

arekskowronjunior@interia.eu

areopro@gmail.com

aresreobpo@gmail.com

aresti.marcello@tiscali.it

aresustefano@tiscali.it

aretec63@tiscali.it

argentineink@aol.com

argentino_dog@abv.bg

argerpenafs915@gmail.com

argilanster@gmail.com

ARGILTA@mail.ru

ari.garcia93@yahoo.com

ari_princesa_4@htmail.com

ari63@tiscali.it

aria.ugolini@tiscali.it

arianaconnvex@gmail.com

arianna1982@tiscali.it

ariannacurcio@tiscali.it

ariannanicosia1@virgilio.it

arianne.sulick@hotmail.com

arichansen@gmail.com

aricofrancesco@tiscali.it

ariel.giglio@deluxerealtyllc.com

ariel.isaac@gmail.com

ariel1shalev@gmail.com

arienti.a@tiscali.it

aringas00@mail.ru

aris_tano@hotmail.com

Arisclarkson@comcast.net

aristide1984@tiscali.it

ariuandrea@tiscali.it

arizk@coldwellbanker.com

arizlgm@yahoo.com

arizona.aloha@yahoo.com

arjanbruining@live.nl

arjitypeii@yahoo.com

arkangel@tiscali.it

arkfeld@verizon.net

arkirat188@tiscali.it

arkyone@tiscali.it

arl.drummer@verizon.net

arleneconow@gmail.com

arlis32@hotmail.com

arlr21@hotmail.com

arls87@aol.com

arma969@tiscali.it

armand.dlt@laposte.net

armand@petalumahomes.com

armand95@tiscali.it

armanda.herbert@gmail.com

armando@pacificproperties1.com

Armando@teamrlw.com

armando18011950@tiscali.it

armandorltr@rgv.rr.com

armandotola@tiscali.it

armeni1@virgilio.it

armikmi@gmail.com

Armo_fo_life@hotmail.com

armoredgorilla@gmail.com

armstead007@gmail.com

armstrongcuster@aol.com

arnaldo.neto@live.com

arnat78@mail.ru

arnaud.brilouet@free.fr

arnaud.stoupy@bbox.fr

arnaudgioia@tiscali.it

arnault.g@free.fr

arnd.bussche@t-online.de

arnie@newdre.com

arnold.arnan@gmail.com

arnold@wvc.net

arnold3215@gmail.com

arnold94s@wp.pl

arnoldnz@gmail.com

arobbins@prudentialga.com

arobbinsgreen@hotmail.com
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